HEX
Server: nginx/1.24.0
System: Linux ip-10-50-20-85 6.5.0-1022-aws #22~22.04.1-Ubuntu SMP Fri Jun 14 16:31:00 UTC 2024 x86_64
User: usefuloffices.org (1001)
PHP: 8.1.2-1ubuntu2.23
Disabled: NONE
$ pwd: /proc/self/root/proc/self/cwd/
Upload Files
File: //proc/self/root/proc/self/cwd/redirect.php
<?php 

	if (isset($_GET['id']) && $_GET['id'] == '02'){
		header ('Location: https://track.passportusa.org/base.php?c=67&key=3c57e6c817b89623f0f585cc4548d98b&keyword=' . $_COOKIE['keyword'] . '&ad=' . $_COOKIE['ad'] . '&creative=' . $_COOKIE['creative'] . '&banner=' . $_GET['banner'].'&referrer=usefuloffices');
	} elseif (isset($_GET['id']) && $_GET['id'] == '03'){
		header ('Location: https://track.passportusa.org/base.php?c=68&key=acc9f74b83c374e05d26db8ab1777301&keyword=' . $_COOKIE['keyword'] . '&ad=' . $_COOKIE['ad'] . '&creative=' . $_COOKIE['creative'] . '&banner=' . $_GET['banner'].'&referrer=usefuloffices');
	} elseif (isset($_GET['id']) && $_GET['id'] == '04'){
		header ('Location: https://track.passportusa.org/base.php?c=69&key=3f677291abb7d4cff0fc3c10706eb5e7&keyword=' . $_COOKIE['keyword'] . '&ad=' . $_COOKIE['ad'] . '&creative=' . $_COOKIE['creative'] . '&banner=' . $_GET['banner'].'&referrer=usefuloffices');
	} else {
		// header ('Location: https://passportusa.org/start_now?clixid=33&banner=' . $_GET['banner'] . '&ad=' . $_COOKIE['ad'] . '&creative=' . $_COOKIE['creative'] . '&keyword=' . $_COOKIE['keyword']);		
		header ('Location: https://passportusa.org/start_now?clixid=' . (isset($_COOKIE['clixid']) ? $_COOKIE['clixid'] : '33') . '&banner=' . $_GET['banner'] . '&ad=' . $_COOKIE['ad'] . '&creative=' . $_COOKIE['creative'] . '&keyword=' . $_COOKIE['keyword'].'&referrer=usefuloffices');		
	} 

	// if (isset($_GET['id']) && $_GET['id'] == '02'){
	// 	header ('Location: https://track.passportusa.org/base.php?c=67&key=3c57e6c817b89623f0f585cc4548d98b&keyword=' . $_COOKIE['keyword'] . '&ad=' . $_COOKIE['ad'] . '&creative=' . $_COOKIE['creative'] . '&geo=' . $_COOKIE['loc_physical_ms'] . '&placement=' . $_COOKIE['placement'] . '&feedid=' . $_COOKIE['feeditemid'] . '&gdevice=' . $_COOKIE['device'] . '&srchn=' . $_COOKIE['ifsearch'] . '&match=' . $_COOKIE['matchtype'] . '&banner=' . $_GET['banner']);
	// } elseif (isset($_GET['id']) && $_GET['id'] == '03'){
	// 	header ('Location: https://track.passportusa.org/base.php?c=68&key=acc9f74b83c374e05d26db8ab1777301&keyword=' . $_COOKIE['keyword'] . '&ad=' . $_COOKIE['ad'] . '&creative=' . $_COOKIE['creative'] . '&geo=' . $_COOKIE['loc_physical_ms'] . '&placement=' . $_COOKIE['placement'] . '&feedid=' . $_COOKIE['feeditemid'] . '&gdevice=' . $_COOKIE['device'] . '&srchn=' . $_COOKIE['ifsearch'] . '&match=' . $_COOKIE['matchtype'] . '&banner=' . $_GET['banner']);
	// } elseif (isset($_GET['id']) && $_GET['id'] == '04'){
	// 	header ('Location: https://track.passportusa.org/base.php?c=69&key=3f677291abb7d4cff0fc3c10706eb5e7&keyword=' . $_COOKIE['keyword'] . '&ad=' . $_COOKIE['ad'] . '&creative=' . $_COOKIE['creative'] . '&geo=' . $_COOKIE['loc_physical_ms'] . '&placement=' . $_COOKIE['placement'] . '&feedid=' . $_COOKIE['feeditemid'] . '&gdevice=' . $_COOKIE['device'] . '&srchn=' . $_COOKIE['ifsearch'] . '&match=' . $_COOKIE['matchtype'] . '&banner=' . $_GET['banner']);
	// } else {
	// 	header ('Location: https://passportusa.org/start_now?clixid=33&banner=' . $_GET['banner'] . '&ad=' . $_COOKIE['ad'] . '&creative=' . $_COOKIE['creative'] . '&keyword=' . $_COOKIE['keyword']);		
	// }
?>
@ Telegram