Variable | Value |
ALLUSERSPROFILE | C:\Documents and Settings\All Users |
APP_POOL_ID | DefaultAppPool |
ClusterLog | C:\WINDOWS\Cluster\cluster.log |
CommonProgramFiles | C:\Program Files\Common Files |
COMPUTERNAME | SERVER |
ComSpec | C:\WINDOWS\system32\cmd.exe |
DEFLOGDIR | C:\Documents and Settings\All Users\Application Data\McAfee\DesktopProtection |
FP_NO_HOST_CHECK | NO |
lib | C:\Program Files\SQLXML 4.0\bin\ |
NUMBER_OF_PROCESSORS | 1 |
OS | Windows_NT |
Path | C:\Program Files\Windows Resource Kits\Tools\;C:\Perl\site\bin;C:\Perl\bin;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;c:\Program Files\Microsoft ADS\bin;c:\Program Files\Microsoft ADS\tools;C:\WINDOWS\system32\WindowsPowerShell\v1.0;C:\WINDOWS\system32\WindowsPowerShell\v1.0;C:\Program Files\Common Files\Acronis\SnapAPI\;C:\Program Files\Microsoft SQL Server\80\Tools\Binn\;C:\Program Files\Microsoft SQL Server\90\DTS\Binn\;C:\Program Files\Microsoft SQL Server\90\Tools\binn\;C:\Program Files\Microsoft SQL Server\90\Tools\Binn\VSShell\Common7\IDE\;C:\Program Files\Microsoft Visual Studio 8\Common7\IDE\PrivateAssemblies\;C:\Program Files\cURL\bin |
PATHEXT | .COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.PSC1;.PSC1 |
PROCESSOR_ARCHITECTURE | x86 |
PROCESSOR_IDENTIFIER | x86 Family 6 Model 45 Stepping 7, GenuineIntel |
PROCESSOR_LEVEL | 6 |
PROCESSOR_REVISION | 2d07 |
ProgramFiles | C:\Program Files |
PSModulePath | C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules\ |
SystemDrive | C: |
SystemRoot | C:\WINDOWS |
TEMP | C:\WINDOWS\TEMP |
TMP | C:\WINDOWS\TEMP |
USERPROFILE | C:\Documents and Settings\Default User |
VSEDEFLOGDIR | C:\Documents and Settings\All Users\Application Data\McAfee\DesktopProtection |
windir | C:\WINDOWS |
HTTP_CONNECTION | Keep-Alive |
HTTP_ACCEPT | */* |
HTTP_ACCEPT_ENCODING | gzip, br, zstd, deflate |
HTTP_COOKIE | fikker-61vm-nk2N=MgPGRI6oXLV7DSLWJk4y6wNi63F1ZE0E |
HTTP_HOST | ehostingpoint.com |
HTTP_MAX_FORWARDS | 10 |
HTTP_USER_AGENT | Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com) |
HTTP_X_ORIGINAL_URL | /info.php?a%5B%5D=%3Ca+href%3Dhttp%3A%2F%2Fwww.krasbasket.ru%2Fgoto%2FaHR0cHM6Ly93d3cuSGlnaHN0YWtlcy5jb20%3Ehttp+%2F%2Fdl.highstakesweeps.Com+login%3C%2Fa%3E%3Cmeta+http-equiv%3Drefresh+content%3D0%3Burl%3Dhttps%3A%2F%2Feysk.exdex.ru%2Fto%2F%3Fl%3DaHR0cHM6Ly93d3cuaGlnaHN0YWtlcy5jb20v+%2F%3E |
HTTP_X_FORWARDED_FOR | 3.147.81.186:56037 |
HTTP_X_ARR_LOG_ID | b1fa3cff-38e5-45be-bbf7-fa5816e83b16 |
APP_POOL_ID | DefaultAppPool |
AUTH_TYPE | no value |
AUTH_PASSWORD | no value |
AUTH_USER | no value |
CERT_COOKIE | no value |
CERT_FLAGS | no value |
CERT_ISSUER | no value |
CERT_SERIALNUMBER | no value |
CERT_SUBJECT | no value |
CONTENT_LENGTH | 0 |
CONTENT_TYPE | no value |
GATEWAY_INTERFACE | CGI/1.1 |
HTTPS | off |
HTTPS_KEYSIZE | no value |
HTTPS_SECRETKEYSIZE | no value |
HTTPS_SERVER_ISSUER | no value |
HTTPS_SERVER_SUBJECT | no value |
INSTANCE_ID | 9146 |
LOCAL_ADDR | 8.38.89.46 |
LOGON_USER | no value |
PATH_INFO | /info.php |
PATH_TRANSLATED | D:\wwwroot\webclients\ehostingpoint.com\wwwroot\info.php |
QUERY_STRING | a%5B%5D=%3Ca+href%3Dhttp%3A%2F%2Fwww.krasbasket.ru%2Fgoto%2FaHR0cHM6Ly93d3cuSGlnaHN0YWtlcy5jb20%3Ehttp+%2F%2Fdl.highstakesweeps.Com+login%3C%2Fa%3E%3Cmeta+http-equiv%3Drefresh+content%3D0%3Burl%3Dhttps%3A%2F%2Feysk.exdex.ru%2Fto%2F%3Fl%3DaHR0cHM6Ly93d3cuaGlnaHN0YWtlcy5jb20v+%2F%3E |
REMOTE_ADDR | 8.38.89.47 |
REMOTE_HOST | 8.38.89.47 |
REMOTE_USER | no value |
REQUEST_METHOD | GET |
SCRIPT_NAME | /info.php |
SERVER_NAME | ehostingpoint.com |
SERVER_PORT | 80 |
SERVER_PORT_SECURE | 0 |
SERVER_PROTOCOL | HTTP/1.1 |
SERVER_SOFTWARE | Microsoft-IIS/6.0 |
UNMAPPED_REMOTE_USER | no value |
Variable | Value |
PHP_SELF | /info.php |
_REQUEST["a"] | Array
(
[0] => http //dl.highstakesweeps.Com login
)
|
_REQUEST["fikker-61vm-nk2N"] | MgPGRI6oXLV7DSLWJk4y6wNi63F1ZE0E |
_GET["a"] | Array
(
[0] => http //dl.highstakesweeps.Com login
)
|
_COOKIE["fikker-61vm-nk2N"] | MgPGRI6oXLV7DSLWJk4y6wNi63F1ZE0E |
_SERVER["ALLUSERSPROFILE"] | C:\\Documents and Settings\\All Users |
_SERVER["APP_POOL_ID"] | DefaultAppPool |
_SERVER["ClusterLog"] | C:\\WINDOWS\\Cluster\\cluster.log |
_SERVER["CommonProgramFiles"] | C:\\Program Files\\Common Files |
_SERVER["COMPUTERNAME"] | SERVER |
_SERVER["ComSpec"] | C:\\WINDOWS\\system32\\cmd.exe |
_SERVER["DEFLOGDIR"] | C:\\Documents and Settings\\All Users\\Application Data\\McAfee\\DesktopProtection |
_SERVER["FP_NO_HOST_CHECK"] | NO |
_SERVER["lib"] | C:\\Program Files\\SQLXML 4.0\\bin\\ |
_SERVER["NUMBER_OF_PROCESSORS"] | 1 |
_SERVER["OS"] | Windows_NT |
_SERVER["Path"] | C:\\Program Files\\Windows Resource Kits\\Tools\\;C:\\Perl\\site\\bin;C:\\Perl\\bin;C:\\WINDOWS\\system32;C:\\WINDOWS;C:\\WINDOWS\\System32\\Wbem;c:\\Program Files\\Microsoft ADS\\bin;c:\\Program Files\\Microsoft ADS\\tools;C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0;C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0;C:\\Program Files\\Common Files\\Acronis\\SnapAPI\\;C:\\Program Files\\Microsoft SQL Server\\80\\Tools\\Binn\\;C:\\Program Files\\Microsoft SQL Server\\90\\DTS\\Binn\\;C:\\Program Files\\Microsoft SQL Server\\90\\Tools\\binn\\;C:\\Program Files\\Microsoft SQL Server\\90\\Tools\\Binn\\VSShell\\Common7\\IDE\\;C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\PrivateAssemblies\\;C:\\Program Files\\cURL\\bin |
_SERVER["PATHEXT"] | .COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.PSC1;.PSC1 |
_SERVER["PROCESSOR_ARCHITECTURE"] | x86 |
_SERVER["PROCESSOR_IDENTIFIER"] | x86 Family 6 Model 45 Stepping 7, GenuineIntel |
_SERVER["PROCESSOR_LEVEL"] | 6 |
_SERVER["PROCESSOR_REVISION"] | 2d07 |
_SERVER["ProgramFiles"] | C:\\Program Files |
_SERVER["PSModulePath"] | C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\ |
_SERVER["SystemDrive"] | C: |
_SERVER["SystemRoot"] | C:\\WINDOWS |
_SERVER["TEMP"] | C:\\WINDOWS\\TEMP |
_SERVER["TMP"] | C:\\WINDOWS\\TEMP |
_SERVER["USERPROFILE"] | C:\\Documents and Settings\\Default User |
_SERVER["VSEDEFLOGDIR"] | C:\\Documents and Settings\\All Users\\Application Data\\McAfee\\DesktopProtection |
_SERVER["windir"] | C:\\WINDOWS |
_SERVER["HTTP_CONNECTION"] | Keep-Alive |
_SERVER["HTTP_ACCEPT"] | */* |
_SERVER["HTTP_ACCEPT_ENCODING"] | gzip, br, zstd, deflate |
_SERVER["HTTP_COOKIE"] | fikker-61vm-nk2N=MgPGRI6oXLV7DSLWJk4y6wNi63F1ZE0E |
_SERVER["HTTP_HOST"] | ehostingpoint.com |
_SERVER["HTTP_MAX_FORWARDS"] | 10 |
_SERVER["HTTP_USER_AGENT"] | Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com) |
_SERVER["HTTP_X_ORIGINAL_URL"] | /info.php?a%5B%5D=%3Ca+href%3Dhttp%3A%2F%2Fwww.krasbasket.ru%2Fgoto%2FaHR0cHM6Ly93d3cuSGlnaHN0YWtlcy5jb20%3Ehttp+%2F%2Fdl.highstakesweeps.Com+login%3C%2Fa%3E%3Cmeta+http-equiv%3Drefresh+content%3D0%3Burl%3Dhttps%3A%2F%2Feysk.exdex.ru%2Fto%2F%3Fl%3DaHR0cHM6Ly93d3cuaGlnaHN0YWtlcy5jb20v+%2F%3E |
_SERVER["HTTP_X_FORWARDED_FOR"] | 3.147.81.186:56037 |
_SERVER["HTTP_X_ARR_LOG_ID"] | b1fa3cff-38e5-45be-bbf7-fa5816e83b16 |
_SERVER["AUTH_TYPE"] | no value |
_SERVER["AUTH_PASSWORD"] | no value |
_SERVER["AUTH_USER"] | no value |
_SERVER["CERT_COOKIE"] | no value |
_SERVER["CERT_FLAGS"] | no value |
_SERVER["CERT_ISSUER"] | no value |
_SERVER["CERT_SERIALNUMBER"] | no value |
_SERVER["CERT_SUBJECT"] | no value |
_SERVER["CONTENT_LENGTH"] | 0 |
_SERVER["CONTENT_TYPE"] | no value |
_SERVER["GATEWAY_INTERFACE"] | CGI/1.1 |
_SERVER["HTTPS"] | off |
_SERVER["HTTPS_KEYSIZE"] | no value |
_SERVER["HTTPS_SECRETKEYSIZE"] | no value |
_SERVER["HTTPS_SERVER_ISSUER"] | no value |
_SERVER["HTTPS_SERVER_SUBJECT"] | no value |
_SERVER["INSTANCE_ID"] | 9146 |
_SERVER["LOCAL_ADDR"] | 8.38.89.46 |
_SERVER["LOGON_USER"] | no value |
_SERVER["PATH_INFO"] | /info.php |
_SERVER["PATH_TRANSLATED"] | D:\\wwwroot\\webclients\\ehostingpoint.com\\wwwroot\\info.php |
_SERVER["QUERY_STRING"] | a%5B%5D=%3Ca+href%3Dhttp%3A%2F%2Fwww.krasbasket.ru%2Fgoto%2FaHR0cHM6Ly93d3cuSGlnaHN0YWtlcy5jb20%3Ehttp+%2F%2Fdl.highstakesweeps.Com+login%3C%2Fa%3E%3Cmeta+http-equiv%3Drefresh+content%3D0%3Burl%3Dhttps%3A%2F%2Feysk.exdex.ru%2Fto%2F%3Fl%3DaHR0cHM6Ly93d3cuaGlnaHN0YWtlcy5jb20v+%2F%3E |
_SERVER["REMOTE_ADDR"] | 8.38.89.47 |
_SERVER["REMOTE_HOST"] | 8.38.89.47 |
_SERVER["REMOTE_USER"] | no value |
_SERVER["REQUEST_METHOD"] | GET |
_SERVER["SCRIPT_NAME"] | /info.php |
_SERVER["SERVER_NAME"] | ehostingpoint.com |
_SERVER["SERVER_PORT"] | 80 |
_SERVER["SERVER_PORT_SECURE"] | 0 |
_SERVER["SERVER_PROTOCOL"] | HTTP/1.1 |
_SERVER["SERVER_SOFTWARE"] | Microsoft-IIS/6.0 |
_SERVER["UNMAPPED_REMOTE_USER"] | no value |
_SERVER["PHP_SELF"] | /info.php |
_SERVER["argv"] | Array
(
[0] => a%5B%5D=%3Ca
[1] => href%3Dhttp%3A%2F%2Fwww.krasbasket.ru%2Fgoto%2FaHR0cHM6Ly93d3cuSGlnaHN0YWtlcy5jb20%3Ehttp
[2] => %2F%2Fdl.highstakesweeps.Com
[3] => login%3C%2Fa%3E%3Cmeta
[4] => http-equiv%3Drefresh
[5] => content%3D0%3Burl%3Dhttps%3A%2F%2Feysk.exdex.ru%2Fto%2F%3Fl%3DaHR0cHM6Ly93d3cuaGlnaHN0YWtlcy5jb20v
[6] => %2F%3E
)
|
_SERVER["argc"] | 7 |
_ENV["ALLUSERSPROFILE"] | C:\\Documents and Settings\\All Users |
_ENV["APP_POOL_ID"] | DefaultAppPool |
_ENV["ClusterLog"] | C:\\WINDOWS\\Cluster\\cluster.log |
_ENV["CommonProgramFiles"] | C:\\Program Files\\Common Files |
_ENV["COMPUTERNAME"] | SERVER |
_ENV["ComSpec"] | C:\\WINDOWS\\system32\\cmd.exe |
_ENV["DEFLOGDIR"] | C:\\Documents and Settings\\All Users\\Application Data\\McAfee\\DesktopProtection |
_ENV["FP_NO_HOST_CHECK"] | NO |
_ENV["lib"] | C:\\Program Files\\SQLXML 4.0\\bin\\ |
_ENV["NUMBER_OF_PROCESSORS"] | 1 |
_ENV["OS"] | Windows_NT |
_ENV["Path"] | C:\\Program Files\\Windows Resource Kits\\Tools\\;C:\\Perl\\site\\bin;C:\\Perl\\bin;C:\\WINDOWS\\system32;C:\\WINDOWS;C:\\WINDOWS\\System32\\Wbem;c:\\Program Files\\Microsoft ADS\\bin;c:\\Program Files\\Microsoft ADS\\tools;C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0;C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0;C:\\Program Files\\Common Files\\Acronis\\SnapAPI\\;C:\\Program Files\\Microsoft SQL Server\\80\\Tools\\Binn\\;C:\\Program Files\\Microsoft SQL Server\\90\\DTS\\Binn\\;C:\\Program Files\\Microsoft SQL Server\\90\\Tools\\binn\\;C:\\Program Files\\Microsoft SQL Server\\90\\Tools\\Binn\\VSShell\\Common7\\IDE\\;C:\\Program Files\\Microsoft Visual Studio 8\\Common7\\IDE\\PrivateAssemblies\\;C:\\Program Files\\cURL\\bin |
_ENV["PATHEXT"] | .COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.PSC1;.PSC1 |
_ENV["PROCESSOR_ARCHITECTURE"] | x86 |
_ENV["PROCESSOR_IDENTIFIER"] | x86 Family 6 Model 45 Stepping 7, GenuineIntel |
_ENV["PROCESSOR_LEVEL"] | 6 |
_ENV["PROCESSOR_REVISION"] | 2d07 |
_ENV["ProgramFiles"] | C:\\Program Files |
_ENV["PSModulePath"] | C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\ |
_ENV["SystemDrive"] | C: |
_ENV["SystemRoot"] | C:\\WINDOWS |
_ENV["TEMP"] | C:\\WINDOWS\\TEMP |
_ENV["TMP"] | C:\\WINDOWS\\TEMP |
_ENV["USERPROFILE"] | C:\\Documents and Settings\\Default User |
_ENV["VSEDEFLOGDIR"] | C:\\Documents and Settings\\All Users\\Application Data\\McAfee\\DesktopProtection |
_ENV["windir"] | C:\\WINDOWS |
_ENV["HTTP_CONNECTION"] | Keep-Alive |
_ENV["HTTP_ACCEPT"] | */* |
_ENV["HTTP_ACCEPT_ENCODING"] | gzip, br, zstd, deflate |
_ENV["HTTP_COOKIE"] | fikker-61vm-nk2N=MgPGRI6oXLV7DSLWJk4y6wNi63F1ZE0E |
_ENV["HTTP_HOST"] | ehostingpoint.com |
_ENV["HTTP_MAX_FORWARDS"] | 10 |
_ENV["HTTP_USER_AGENT"] | Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com) |
_ENV["HTTP_X_ORIGINAL_URL"] | /info.php?a%5B%5D=%3Ca+href%3Dhttp%3A%2F%2Fwww.krasbasket.ru%2Fgoto%2FaHR0cHM6Ly93d3cuSGlnaHN0YWtlcy5jb20%3Ehttp+%2F%2Fdl.highstakesweeps.Com+login%3C%2Fa%3E%3Cmeta+http-equiv%3Drefresh+content%3D0%3Burl%3Dhttps%3A%2F%2Feysk.exdex.ru%2Fto%2F%3Fl%3DaHR0cHM6Ly93d3cuaGlnaHN0YWtlcy5jb20v+%2F%3E |
_ENV["HTTP_X_FORWARDED_FOR"] | 3.147.81.186:56037 |
_ENV["HTTP_X_ARR_LOG_ID"] | b1fa3cff-38e5-45be-bbf7-fa5816e83b16 |
_ENV["AUTH_TYPE"] | no value |
_ENV["AUTH_PASSWORD"] | no value |
_ENV["AUTH_USER"] | no value |
_ENV["CERT_COOKIE"] | no value |
_ENV["CERT_FLAGS"] | no value |
_ENV["CERT_ISSUER"] | no value |
_ENV["CERT_SERIALNUMBER"] | no value |
_ENV["CERT_SUBJECT"] | no value |
_ENV["CONTENT_LENGTH"] | 0 |
_ENV["CONTENT_TYPE"] | no value |
_ENV["GATEWAY_INTERFACE"] | CGI/1.1 |
_ENV["HTTPS"] | off |
_ENV["HTTPS_KEYSIZE"] | no value |
_ENV["HTTPS_SECRETKEYSIZE"] | no value |
_ENV["HTTPS_SERVER_ISSUER"] | no value |
_ENV["HTTPS_SERVER_SUBJECT"] | no value |
_ENV["INSTANCE_ID"] | 9146 |
_ENV["LOCAL_ADDR"] | 8.38.89.46 |
_ENV["LOGON_USER"] | no value |
_ENV["PATH_INFO"] | /info.php |
_ENV["PATH_TRANSLATED"] | D:\\wwwroot\\webclients\\ehostingpoint.com\\wwwroot\\info.php |
_ENV["QUERY_STRING"] | a%5B%5D=%3Ca+href%3Dhttp%3A%2F%2Fwww.krasbasket.ru%2Fgoto%2FaHR0cHM6Ly93d3cuSGlnaHN0YWtlcy5jb20%3Ehttp+%2F%2Fdl.highstakesweeps.Com+login%3C%2Fa%3E%3Cmeta+http-equiv%3Drefresh+content%3D0%3Burl%3Dhttps%3A%2F%2Feysk.exdex.ru%2Fto%2F%3Fl%3DaHR0cHM6Ly93d3cuaGlnaHN0YWtlcy5jb20v+%2F%3E |
_ENV["REMOTE_ADDR"] | 8.38.89.47 |
_ENV["REMOTE_HOST"] | 8.38.89.47 |
_ENV["REMOTE_USER"] | no value |
_ENV["REQUEST_METHOD"] | GET |
_ENV["SCRIPT_NAME"] | /info.php |
_ENV["SERVER_NAME"] | ehostingpoint.com |
_ENV["SERVER_PORT"] | 80 |
_ENV["SERVER_PORT_SECURE"] | 0 |
_ENV["SERVER_PROTOCOL"] | HTTP/1.1 |
_ENV["SERVER_SOFTWARE"] | Microsoft-IIS/6.0 |
_ENV["UNMAPPED_REMOTE_USER"] | no value |